funsec mailing list archives

Re: Question about Viruses


From: Peter Kosinar <goober () nuf ksp sk>
Date: Fri, 7 Jul 2006 20:19:07 +0200 (CEST)

This way the engine wouldnt submit the new virus to the parent company
for developers to figure out a removal procedure.

In fact, this happens regularly (though, not very often) -- certain pieces of malware tend to be infected by parasitic viruses (Win32/Parite.B comes into mind) and are thus detected as such and possibly disinfected by the AV and the underlying piece of malware might remain undetected. On the other hand, such "protection" usually lasts for very short time...

Like I said, I am not a coder (yet, I am trying to learn in my spare
time), so lemme know if this is completely incorrect.

Peter

--
[Name] Peter Kosinar   [Quote] 2B | ~2B = exp(i*PI)   [ICQ] 134813278


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: