Orchid XP v8 wrote:
> how the product decides whether a given item is on that list is
> another matter. (I really hope it isn't just by process image name...!)

Some crappy old firewalls actually compared process image name.

This tool pretends to be IE and attempts connecting to the 'net. If it
succeeds, and your firewall doesn't give any warning about it, it sucks.

http://www.grc.com/lt/leaktest.htm

Post a reply to this message

>> Anything interesting?
> 
> Not particularly. It was actually rather poorly written iirc, used CDO, 
> I believe to read the address book and propagate itself.

Heh. I can easily imagine a virus not being the aphex of coding 
technology. ;-) I've seen a number of virus descriptions that talk about 
broken payloads or things not working right...

Actually, I've occasionally thought about trying to *write* a virus, 
just to see if I can do it... But that's illegal. And besides, I'm sure 
Haskell isn't the best way to do it either. :-P

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message

Invisible wrote:
> Actually, I've occasionally thought about trying to *write* a virus, 
> just to see if I can do it... But that's illegal. And besides, I'm sure 
> Haskell isn't the best way to do it either. :-P
> 

No, not illegal and not a bad learning experience. Propagating a virus 
into the wild, though, is _definitely_ illegal.

John

Post a reply to this message

>> Actually, I've occasionally thought about trying to *write* a virus, 
>> just to see if I can do it... But that's illegal. And besides, I'm 
>> sure Haskell isn't the best way to do it either. :-P
> 
> No, not illegal and not a bad learning experience. Propagating a virus 
> into the wild, though, is _definitely_ illegal.

Sure. And owning a gun is illegal, but owning all of the components 
necessary to assemble a gun isn't. But good luck explaining to the 
people raiding your house why you have all these components. ;-)

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message

"Orchid XP v8" <voi### [at] devnull> wrote in message 
news:48975170$1@news.povray.org...

> My dad's PC seems to periodically become infected by... *something* or 
> other. Usually just trojans and browser hooks. I don't know what the heck 
> he does that I don't, but I've never had any similar problems...

      I don't have problems now, (thankfully!) but I did on my original 98 
machine, (which was then later changed to XP). (Which is STILL sat beside me 
on the floor doing nothing!)

     Anyway, I clicked on a virus email the other day to see what would 
happen, and AVG kicked in big time (immediately) and quarantined it.

       If you can't find me after this, please send a search party, I'm 


         ~2&8*ds~   ;)

Post a reply to this message

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

-- 
http://blog.orphi.me.uk/
http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message

"Orchid XP v8" <voi### [at] devnull> wrote in message 
news:4898b163$1@news.povray.org...


> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

   LOL, I'm guessing that actually means something, whereas mine didn't. 
Thanks for the laugh mate, I needed it.  :)

    AND I'M NOT CLICKING ON IT!!  :op


     ~Steve~




>
> -- 
> http://blog.orphi.me.uk/
> http://www.zazzle.com/MathematicalOrchid*

Post a reply to this message

On Tue, 05 Aug 2008 21:44:18 +0100, St. wrote:

> "Orchid XP v8" <voi### [at] devnull> wrote in message
> news:4898b163$1@news.povray.org...
> 
> 
>> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
> 
>    LOL, I'm guessing that actually means something, whereas mine didn't.
> Thanks for the laugh mate, I needed it.  :)

http://en.wikipedia.org/wiki/Eicar_test_file

:-)

Jim

Post a reply to this message

"Jim Henderson" <nos### [at] nospamcom> wrote in message 
news:4898be73@news.povray.org...
> On Tue, 05 Aug 2008 21:44:18 +0100, St. wrote:
>
>> "Orchid XP v8" <voi### [at] devnull> wrote in message
>> news:4898b163$1@news.povray.org...
>>
>>
>>> X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*
>>
>>    LOL, I'm guessing that actually means something, whereas mine didn't.
>> Thanks for the laugh mate, I needed it.  :)
>
> http://en.wikipedia.org/wiki/Eicar_test_file

   Haha, thanks Jim, I didn't know that existed. You guys are great.


>
> :-)

    :-)

   ~Steve~



>
> Jim

Post a reply to this message

On Tue, 05 Aug 2008 22:46:56 +0100, St. wrote:

>    Haha, thanks Jim, I didn't know that existed. You guys are great.

Hehe, GIYF. ;-)  But I had seen it before, just didn't know what the 
contents actually were.  There's also a standard file for testing UCE as 
well - used for testing SpamAssassin installations to make sure it's 
working.  I'd never heard of that one before.

Jim

Post a reply to this message