Article View: comp.virus
Article #3030The Harmless Virus
From: WHMurray
Date: Tue, 29 Sep 1992 02:46
Date: Tue, 29 Sep 1992 02:46
37 lines
2092 bytes
2092 bytes
Padgett Peterson notes that:
>Problem is that many viruses do not attach themselves properly to files &
>overwrite part of the file or lose the original pieces. Once this happens
>the file cannot be reconstructed. Unlike the movies where every virus does
>exactly what it is supposed to, in the real world virus code is incredibly
>buggy. Possibly this is because those people who could write one without
>without bugs won't 8*) - but don't count on it. (do you hear an echo
>here ?)
I would like to suggest that the problem is more fundamental than
simply one of skill. Writing a perfectly harmless virus requires a
perfect knowledge of the environment. Not only must the writer
understand the execution environment perfectly, but he must also
understand the population perfectly.
Padgett observes:
>For instance, Michelangelo is known to foul up 720k floppies, not
>deliberately,
>but because it *assumes* that all non-360k floppies are the same.
This is a simple oversight, but writing the perfectly harmless virus
requires this knowledge plus perfect knowledge of all other relevant
factors about every system in the population. Such perfect knowledge
is impossible.
____________________________________________________________________
William Hugh Murray 203-966-4769
Information System Security 203-326-1833 (CELLULAR)
DOCKMASTER
MCI-Mail: 315-8580
TELEX: 6503158580
FAX: 203-966-8612
Compu-Serve: 75126,1722
49 Locust Avenue, Suite 104 PRODIGY: DXBM57A
New Canaan, Connecticut 06840
Technical Details
Message-ID:
<0016.9210021910.AA19585@barnabas.cert.org>Path:
arc1-ca.pugleaf.net!sparky!uunet!ukma!darwin.sura.net!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!newsShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!ukma!darwin.sura.net!jvnc.net!netnews.upenn.edu!netnews.cc.lehigh.edu!news From: WHMurray@DOCKMASTER.NCSC.MIL Newsgroups: comp.virus Subject: The Harmless Virus Message-ID: <0016.9210021910.AA19585@barnabas.cert.org> Date: 29 Sep 92 02:46:25 GMT Sender: virus-l@lehigh.edu Lines: 37 Approved: news@netnews.cc.lehigh.edu