Re: virus code is never executed - virus or not?

Michel Messerschmidt <9messers-jNDFPZUTrfQBEfOqpokbeYV0Y/[email protected]> Sat, 10 Jan 2004 20:55:39 +0100
Newsgroups gmane.comp.security.virus.openantivirus.general
Message-ID <[email protected]>
On Fri, Jan 09, 2004 at 10:30:06PM +0000, fergus wrote:
> i would suggest that any unknown code should be
> reported - this could include non-viral code in
> many cases.

"Unknown code" may include nearly every software out there :-)
You need at least a definition what kind of behaviour should be 
reported and what can be ignored, or nobody will be able to handle such 
reports properly.

Although thinking about future use, it might be required to report every 
software that can't be verified by some appropriate measure (integrity 
check, certification, ...).

-- 
Michel Messerschmidt      9messers-jNDFPZUTrfQBEfOqpokbeYV0Y/[email protected]
antiVirusTestCenter, Computer Science, University of Hamburg


-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html