funsec mailing list archives

Re: write viruses? it's controversy time of the month


From: "Dude VanWinkle" <dudevanwinkle () gmail com>
Date: Wed, 30 Aug 2006 14:02:47 -0400

On 8/30/06, Drsolly <drsollyp () drsolly com> wrote:
On Wed, 30 Aug 2006, Dude VanWinkle wrote:

> On 8/30/06, Blue Boar <BlueBoar () thievco com> wrote:
> > Drsolly wrote:
> > > Uh - no. That's not being a good guy. Being a good guy, means you deleted
> > > all copies of the virus.
> >
> > Speaking of which, do you want Consumer Reports to delete their 5500
> > "viruses", or do you want them to submit them to AV to see if they are
> > really viral?
>
>
> rhetorical question alert!!
>
> since most viruses are met with applications that analyze them (99%)
> the addition of 5.5k would only help the analysis or prove 99% of the
> company is useless ;-)

Sorry, I don't think I speak the same language you do - could you reword
that for me, please?


I did an eval of most AV companies for the Campus AntiVirus review. A
lot of them were bragging about their auto analysis software. If a
client picks up a possible "unknown" virus, it is sent to the AV
companies servers for analysis. I was told by Kaspersky that 90 some
odd percent of the files sent are analyzed by a fully automated
process, and the "tricky ones" that the automated process couldnt
handle were analyzed by humans. I just assumed this was industry
standard.

Did I assume wrong?

-JP
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: