Re: Trojan horse Downloader.Generic.ML

Zvi Netiv wrote:
> kurt wismer <kurtw@sympatico.ca> wrote:
>>Zvi Netiv wrote:
> [...]
>
>>>I have no interest in general purpose integrity checkers, only in those offered
>>>as AV tools, like Integrity Master, which you brought to the discussion.
>>
>>integrity master is an integrity checker with anti-viral applications...
>> it does (did) have a few small features specific to virus detection,
>>but they are not the primary features of the software...
>
> You repeated that nonsense so many times that you seem believing it yourself.
> Check IM's home page at www.stiller.com and see its anti virus nature all over
> the place.

the website plays up the anti-virus application of the software because
that's what distinguishes it from all the tools whose sole purpose is to
check for corruption...

> [...]
>
>>>A program that overwrites the host indiscriminately may be called an overwriter,
>>>but not infector, maybe a Trojan. Hence, your "overwriting infector" is
>>>fiction, no such thing exists.
>>
>>yours is the only definition i've seen that requires the original host's
>>functionality be left intact... why i, or anyone else, should choose to
>>use your definition over that of, say fred cohen, is beyond me
>
> Obviously, you haven't seen everything yet. ;) Besides, the definition I
> brought isn't mine and it doesn't contradict F. Cohen's.

his informal definition does not require that the original functionality
of the host be maintained, and his formal definition states that all
self-replicating programs are viruses... neither of these agree with the
assertion you've put forward that viruses must maintain the original
functionality of the host program...

-- 
"they threw a rope around yer neck to watch you dance the jig of death
then left ya for the starvin' crows, hoverin' like hungry whores
one flew down plucked out yer eye, the other he had in his sights
ya snarled at him, said leave me be - i need the bugger so i can see"