🚀 go-pugleaf

hps@sdf.lonestar.org (Holt Sorenson) writes:

> VCL is a Borland IDE based "Virus Creation Laboratory" that creates

Don't blame Borland for what it not their fault. VCL is created with
Borland's TurboVision, that's why it resembles to Borland's IDE. What
you are saying seems to imply that Borland is somehow involved in the
creation of this stupid piece of malware that is VCL.

> poorly optimized, inefficient overwriting .COM and .EXE infectors.

It creates buggy, usually not running, not optimized at all, stupid
overwriting .COM infectors. Some of them can overwrite just all files
(*.*), but this does not mean that they can correctly infect EXE files
(i.e., without damaging them). It can also produce lame trojan horses.
It also tries to produce companion viruses, but they don't work.

> You can get ahold of it on most virus bbs's or from a virus writer or
> an anti-virus buff who would trust you with it. If you understand

The above is a totally unfounded flame against the honest anti-virus
researchers. You have already posted it twice. If you have any facts,
please speak up. But facts only, please.

> Assembly it is possible to patch the code and create virii and some of
> the code is sound enough to create a virus with.  Compared to the

You mean, if you are good enough in assembly language, you might find
the bugs in the viruses that VCL generates and eventually fix them. I
mean, fix the viruses, because you cannot fix the VCL program itself -
it's too buggy for that. But why bother? Anybody who is able to fix
those bugs should be able to write a virus himself, instead of using
the stupid things that VCL generates... :-)

> current technology available in the virus world it is outdated.

It has already been outdated, when it has been released... :-)

> Unfortunately, the author has promised to release a second version
> which is supposed to have several improvements that will make it more

Ah? Maybe he will be able to make a proper install program the next
time... The current installation procedure is buggy.

> fun for researchers to play with. I doubt it will create any serious
> problems though. The release will probably be in January or Feruary of

Of course, it doesn't create any serious problems. The only serious
problem is the trend - it's much harder to deal with 2,000 virus
creation tools than with 2,000 viruses... Fortunately, it is much
harder to write a working virus creation tool than it is to create a
working virus...

Regards,
Vesselin
- -- 
Vesselin Vladimirov Bontchev          Virus Test Center, University of Hamburg
Tel.:+49-40-54715-224, Fax: +49-40-54715-226      Fachbereich Informatik - AGN
< PGP 2.0 public key available on request. > Vogt-Koelln-Strasse 30, rm. 107 C
e-mail: bontchev@fbihh.informatik.uni-hamburg.de    D-2000 Hamburg 54, Germany