Re: virus code is never executed - virus or not?

Michel Messerschmidt wrote:

> If you decide to report nothing, you shoud at least take care that the
> file really can't replicate (no entry point obfuscation, ...).
> I would prefer to report something like:
>         <classification>
>           <unknown>
>             <property>
>               may be a corrupted file
>             </property>
>             <property>
>               contains inactive virus code
>             </property>
>           </unknown>
>         </classification>
> (actually just a copy/paste from my current work :-)

Current work? Diploma thesis? --verbose, please :-)

Thanks.

cheers, Rainer




-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html