RE: Overloading AV software, try #2

[Peter Kosinar <goober () nuf ksp sk>]

> My question is about overloading the user with warning messages, not DoSing
> a box.  Let me try asking my question a different way.  If an AV software
> package suddenly sees 200 virus files being written to a hard drive, will it
> present to the user 200 individual warning messages about these virus files?

Depends on the AV; I know at least one which allows you to automatically 
perform an action (disinfect/delete/quarantine/...) for e.g. next 10 
minutes; thus eliminating this kind of user-based DoS.

Peter

--
[Name] Peter Kosinar   [Quote] 2B | ~2B = exp(i*PI)   [ICQ] 134813278


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.