Where I can find a virus collection?
CescoAce
Where I can find viruses in the net? Are they operativ?
Tanx for repaly
a friend.
Omnivore
CescoAce wrote in message <7t5q5p$90e$4...@nslave1.tin.it>...
Jeffrey A. Setaro
says...
> Hi guys!
> Where I can find viruses in the net? Are they operativ?
> Tanx for repaly
>
Head over to 42nd Street & 8th Avenue and hook up with Candie... For a
small fee she happily provide you with all the viruses you can handle.
--
Cheers-
Jeff Setaro
jase...@sprynet.com
http://home.sprynet.com/~jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99
Webster
Jeffrey A. Setaro <jase...@sprynet.com> wrote in message
news:MPG.126063b0e...@nntp.sprynet.com...
> In article <7t5q5p$90e$4...@nslave1.tin.it>, cesc...@hotmail.com.toglimi
> says...
> > Hi guys!
> > Where I can find viruses in the net? Are they operativ?
> > Tanx for repaly
> >
>
> Head over to 42nd Street & 8th Avenue and hook up with Candie... For a
> small fee she happily provide you with all the viruses you can handle.
Excuse me Jeff, I think that is Candy with the 'y'. At least that is how
she has me spell it on the checks I write her!
Webster
Blevins <ble...@softhome.net> wrote in message
news:pbf2NzjIE1ekZJ...@4ax.com...
> On Sat, 2 Oct 1999 20:11:36 +0200, "CescoAce"
> <cesc...@hotmail.com.toglimi> wrote:
>
> >Hi guys!
> >Where I can find viruses in the net? Are they operativ?
> >Tanx for repaly
> >
> >
>
>
> Most any house of prostitution will have a fine collection.
Now you're talking Billy 'Budweiser' Blevins! This is the subject matter we
need to address............prostitution and virus........wait......medically
speaking an 'infection' is totally different from a virus. Antibiotics will
not work on a virus but they will work on infections! Not true in the PC
world.........a virus has the power of infection but can be cured and
cleaned with any good AV program (the PC equivalent of an
antibiotic)..........and you guys thought I wasn't learning anything in
here!!!
Class Clown BA (working on my Masters)
> Bill Blevins
> ble...@softhome.net
Seanette Blaylock
Setaro) wrote:
>In article <7t5q5p$90e$4...@nslave1.tin.it>, cesc...@hotmail.com.toglimi
>says...
>> Where I can find viruses in the net? Are they operativ?
>> Tanx for repaly
>small fee she happily provide you with all the viruses you can handle.
Ever hear of a C&C warning? ;-)
--
Seanette Blaylock
Reply to sean...@spammers.drop.dead.impulse.net
[make obvious correction]
American in Taiwan
http://asmhome.yeah.net/
In article <7t5q5p$90e$4...@nslave1.tin.it>, cesc...@hotmail.com.toglimi says...
>
>Hi guys!
>Where I can find viruses in the net? Are they operativ?
>Tanx for repaly
>
>a friend.
>
>
kurt wismer
> Hi guys!
> Where I can find viruses in the net? Are they operativ?
lots of places, but why would you bother looking?
--
"read my writing on the wall
no one's here to catch me when i fall
if ignorance is bliss
then knock the smile off my face"
kurt wismer
[snip]
> Now you're talking Billy 'Budweiser' Blevins! This is the subject matter we
> need to address............prostitution and virus........wait......medically
> speaking an 'infection' is totally different from a virus. Antibiotics will
> not work on a virus but they will work on infections!
medically speaking, you're not too knowledgable are you?
anti-biotics work against bacterial infections... yes an infection is
different from a virus, one is a state of being while the other is a
thing... there are viral infections and bacterial infections...
> Not true in the PC
> world.........a virus has the power of infection but can be cured and
> cleaned with any good AV program (the PC equivalent of an
> antibiotic)
no... it's really not analogous to an anti-biotic... av programs would be
more analogous to the stuff they have on star trek - surgical removal on
the cellular level...
> ..........and you guys thought I wasn't learning anything in
> here!!!
i still do...
Justin Doo
------
Webster wrote:
>
> Jeffrey A. Setaro <jase...@sprynet.com> wrote in message
> news:MPG.126063b0e...@nntp.sprynet.com...
> > > Where I can find viruses in the net? Are they operativ?
> > >
> >
> > Head over to 42nd Street & 8th Avenue and hook up with Candie... For a
> > small fee she happily provide you with all the viruses you can handle.
>
Deniz Oezmen
> is that checks or cheques (or even Czecks?)
AFAICR my English lessons, it should be "cheques"....
--
Regards,
Deniz Oezmen
eMail: <Quantensprung [at] GMX [dot] net>
....DB 0xB4, 0x4C, 0xCD, 0x21....
Jeffrey A. Setaro
> Justin Doo schrieb:
>
> > is that checks or cheques (or even Czecks?)
>
> AFAICR my English lessons, it should be "cheques"....
>
Correct in the "Queens English" at least... In US English it's Checks.
Deniz Oezmen
> In article <37F8BB62...@gmx.net>, Quante...@gmx.net says...
> > Justin Doo schrieb:
> >
> > > is that checks or cheques (or even Czecks?)
> >
> > AFAICR my English lessons, it should be "cheques"....
> >
>
> Correct in the "Queens English" at least... In US English it's Checks.
Ah.... again one of those differences "BE vs. AE" that were so suitable to
torture pupils.... =)
Doren Rosenthal
: Where I can find viruses in the net? Are they operativ?
There are a number of virus collections available over the net if you
do a search. However the best collections are not publicaly available.
Fully operative viruses catured in the wild are quite dangerous.
If you need safe test samples, you are welcome to the special tool I offer
designed to generate safe virus test samples, available as shareware.
Doren Rosenthal
Author of Virus Simulator, one of "The Rosenthal Utilities (tm)"
http://slonet.org/~doren/
Frederic
> > is that checks or cheques (or even Czecks?)
>
> AFAICR my English lessons, it should be "cheques"....
According to my dictionary which is often wrong:
check = American English
cheque = British English
Jeffrey A. Setaro
In this case your dictionary is correct.
kurt wismer
> In article <37F8BB62...@gmx.net>, Quante...@gmx.net says...
> > Justin Doo schrieb:
> >
> > > is that checks or cheques (or even Czecks?)
> >
> > AFAICR my English lessons, it should be "cheques"....
>
> Correct in the "Queens English" at least... In US English it's Checks.
well, shouldn't be too hard to guess which one us canucks favour...
PaX
I think you will find any of us that collect Viruses seriously and
have decent archives will not generally post such things on web pages..Yes
there are some remaining sites that post binaries but they are few and far
between.Your point about a "Wild" virus being more dangerous is
flawed...wether a virus is part of an infected file or a pure binary makes
no difference only to collectors as infected files are not really worth
bothering with.
I'm not personally a collector as I place the same value on my cretions as
many others do..They are worthless and have no value..If a trusted friend
has a reason for having my code then i'm happy to let them have it(Under
certain circumstances)I don't promote the idea of a "Virus" or "Virus
Simulation" having any commercial value..They are just programs written by
people like me for (excuse the term) Fun..
Best wishes PaX
Randy Abrams
PaX wrote in message <7td9m6$gih$1...@nclient13-gui.server.virgin.net>...
I think you'll probably have to look at Doren's P&L sheet to see if there's
a commercial value for a virus simulator. Doren has been selling his for
several years. Personally I find it a rather interesting product, but with
extremely limited use. If, as I suggested in my speech at VB99, the AV
industry would provide a non-viral test for boot sector detection I'm not
sure that I could figure out a real use for Doren's Virus Simulator that
couldn't be accomplished with other simple means. For the time being I think
that Doren's sample virus is the safest way we have to test that a product
is scanning boot sectors.
Regards,
Randy
PaX
there's
a commercial value for a virus simulator. Doren has been selling his for
several years. Personally I find it a rather interesting product, but with
extremely limited use. If, as I suggested in my speech at VB99, the AV
industry would provide a non-viral test for boot sector detection I'm not
sure that I could figure out a real use for Doren's Virus Simulator that
couldn't be accomplished with other simple means. For the time being I think
that Doren's sample virus is the safest way we have to test that a product
is scanning boot sectors.<<<
Randy,
Maybe I should have worded my position a little better,I had not
intended to Decry Dorens product in any way(If people buy it then it has
value)Simple logic..
I just can never fully understand why people would want to collect
viruses,They are just programs written in the boredom hours by people such
as I and many others.Having said that there are a number of
friends/associates of mine that do collect and treat their collections as
many would treat a stamp collection also taking it just as seriously.
On the subject of test "Viruses" humm I might give it some thought taking
into account the permission system that we have discussed before,I might
give the test virus thing a spin to see what I can come up with.
Best wishes PaX [UCSI] Dalton
Randy Abrams
PaX wrote in message <7tdv2h$o2k$1...@nclient11-gui.server.virgin.net>...
<snip>
>
>Randy,
> Maybe I should have worded my position a little better,I had not
>intended to Decry Dorens product in any way(If people buy it then it has
>value)Simple logic..
>I just can never fully understand why people would want to collect
>viruses,They are just programs written in the boredom hours by people such
I don't think the people who buy Virus Simulator buy it because they are
collecting viruses, although I guess an avid collector proably wants oen of
Doren's too.
<snip>
>On the subject of test "Viruses" humm I might give it some thought taking
>into account the permission system that we have discussed before,I might
>give the test virus thing a spin to see what I can come up with.
>
I'm not looking for a test virus. I asked the AV community to give us a non
viral macro and boot sector test to compliment the eicar test file. This was
after half an hour of discussing uses for the test file beyond simple
on-demand and on-access installation verification.
Cheers!
Randy
The opinions expressed in this message are my own personal views
and do not reflect the official views of the Microsoft Corporation.
MidNyte[UC]
PaX <P...@ultimatechaos.org> wrote in message
news:7tdv2h$o2k$1...@nclient11-gui.server.virgin.net...
> Randy,
> Maybe I should have worded my position a little better,I had
not
> intended to Decry Dorens product in any way(If people buy it then it has
> value)Simple logic..
> I just can never fully understand why people would want to collect
> viruses,They are just programs written in the boredom hours by people such
> friends/associates of mine that do collect and treat their collections as
> many would treat a stamp collection also taking it just as seriously.
> into account the permission system that we have discussed before,I might
> give the test virus thing a spin to see what I can come up with.
>
>
*cough* MGG *cough* - But I'm guessing that was what you were trying to
get hold of me for the other day?
- MidNyte[UC]
midn...@excite.com
http://members.tripod.co.uk/midnyte2
http://www.ultimatechaos.org
Doren Rosenthal
: Doren,
: I think you will find any of us that collect Viruses seriously and
: have decent archives will not generally post such things on web pages.
Yes, I agree. My own collection is not publicaly available outside my
office either.
For those requireing a virus test sample to exercise their anti-virus
protection, demonstrations, training etc. I provide anyone who can make
use of it with my Virus Simulator available to download FREE from my www
url. Virus Simulator remains one of my most popular utilities.
Doren Rosenthal
Author of "The Rosenthal Utilities (tm)" http://slonet.org/~doren/
Doren Rosenthal
: On the subject of test "Viruses" humm I might give it some thought taking
: into account the permission system that we have discussed before,I might
: give the test virus thing a spin to see what I can come up with.
:
: Best wishes PaX [UCSI] Dalton
You, and anyone else, is more than welcome to try it for yourself. That's
what shareware is all about.
I think you'll especialy like turning my suppliment "A" virus lose on your
hard drive. Yes it will replicate, and give you an hour to figure out how
to get your anti-virus measures to deal with it. After an hour it removes
itself even if you can't get your anti-virus program to work.
Doren....
Author of Virus Simulator, one of "The Rosenthal Utilities (tm)"
http://slonet.org/~doren/
Doren Rosenthal
: I think you'll probably have to look at Doren's P&L sheet to see if there's
: a commercial value for a virus simulator. Doren has been selling his for
: several years.
Actualy since 1990, which is kind of a record for most shareware authors.
Check out my download counts some time!
: Personally I find it a rather interesting product, but with
: extremely limited use.
It's use is described in the DOC file, which most critics have never
bothered to read, and fewer have tried the product at all.
: If, as I suggested in my speech at VB99, the AV
: industry would provide a non-viral test for boot sector detection I'm not
: sure that I could figure out a real use for Doren's Virus Simulator that
: couldn't be accomplished with other simple means.
My Virus Simulator has always employed a boot sector sample generator, and
an memory resident sample generator..... since day one. And anyone is
welcome to download it FREE from my www url.
: For the time being I think
: that Doren's sample virus is the safest way we have to test that a product
: is scanning boot sectors.
:
: Regards,
:
: Randy
Thanks for confirming that Randy. After ten years it's nice that people
are finaly honest enough to admit that on this newsgroup.
Doren Rosenthal
PaX
your
hard drive. Yes it will replicate, and give you an hour to figure out how
to get your anti-virus measures to deal with it. After an hour it removes
Could be some fun...I'll give it a blast..=]
Middz ..yea thats what I wanted to see you about along the lines of the algo
I wanted to discuss..=]
Dalton aka PaX [UCSI]
MidNyte[UC]
Pax,
If you're not going to be around again pretty soon, phone me :) I had a
few new ideas on the subject, maybe an MGG-II in the making :)
-Mid
Axel Pettinger
>
> I'm not looking for a test virus. I asked the AV community to give us
> a non viral macro and boot sector test to compliment the eicar test
> file. This was after half an hour of discussing uses for the test file
> beyond simple on-demand and on-access installation verification.
A non viral macro like the one in Dr Solly's (NAI's) ""WM/Test Macro"
NOT a virus"?
Regards,
Axel Pettinger
Randy Abrams
but if each vendor wants to do their own that can work as well. This leaves
us with boot sectors tests.
Regards,
Randy
The opinions expressed in this message are my own personal views
and do not reflect the official views of the Microsoft Corporation.
Axel Pettinger wrote in message
<37FBCCB5...@stud-mailer.uni-marburgVIRUS.de>...
Fridrik Skulason
>I'm not looking for a test virus. I asked the AV community to give us a non
>viral macro and boot sector test to compliment the eicar test file.
..and as I replied:
The problem is not in creating those things - the problem is in distributing
them. With the EICAR file, it can be included in the documentation, and
people can simply (and easily) type it in. It is even possible to distribute
it on a piece of paper or send it by fax.
With a boot sector or macro test file, this is not possible. One alternative
would be to simply include a standard set of test files with the AV products,
but this idea has been rejected - several AV producers simply do not want to
include files that are detected as viruses with their products.
The best solution we have been able to come up with would be to distributa a
program, which would create the standard test files (and test boot sectors)
when run. If the AV community can reach an agreement on this, such a program
might appear within a few months.
-frisk
--
Fridrik Skulason Frisk Software International phone: +354-5-617273
Author of F-PROT E-mail: fr...@complex.is fax: +354-5-617274
Randy Abrams
Fridrik Skulason wrote in message <7tia6n$8rb$1...@banani.complex.is>...
This sounds like an excellent approach to me. The macro test could be pretty
easily typed in by many users, but the boot sector test would be beyond the
skill level of many users. A test file generator seems to be the best
solution.
It was good to see you at VB, but there wasn't enough time.
Best Regards,
Doren Rosenthal
: Exactly. I think it would be more convenient if there was a standard one,
: but if each vendor wants to do their own that can work as well. This leaves
: us with boot sectors tests.
:
: Regards,
:
: Randy
Randy, my Virus Simulator has established itself as the industry standard.
It will generate a test sample in the boot sector of a test diskette. You
can even boot the system from the test diskette and it will display a
message to confirm itself being installed.
Doren Rosenthal
Author of Virus Simulator http://slonet.org/~doren/
Doren Rosenthal
: The best solution we have been able to come up with would be to distributa a
: program, which would create the standard test files (and test boot sectors)
: when run. If the AV community can reach an agreement on this, such a program
: might appear within a few months.
:
: -frisk
Oh.... You mean like my Rosenthal Virus Simulator?
Virus Simulator has been safely generating test samples including boot
sector samples since 1990. Virus Simulator has clearly established itself
with users and is become quite popular.
Doren Rosenthal
Author of Virus Simulator, one of "The Rosenthal Utilities (tm)"
http://slonet.org/~doren/
Nick FitzGerald
> Oh.... You mean like my Rosenthal Virus Simulator?
No -- Frisk meant something containing no viral code and not
written by a self-promoting virus writer. What Frisk proposes
is an industry-agreed, non-viral test "file" standard from the
outset, not some ego trip imposed on it by a virus writer.
> Virus Simulator has been safely generating test samples including boot
> sector samples since 1990. Virus Simulator has clearly established itself
> with users and is become quite popular.
And as the old saying goes, no-one ever went broke
underestimating the intellect of the market. Your "product"
is still grossly irresponsible and that you are unable to
accept that -- or worse, that you understand this yet still
peddle your product -- shows why you are part of the problem
and why mainstream AV researchers shun you.
--
Nick FitzGerald
Randy Abrams
Doren Rosenthal wrote in message ...
kurt wismer
> Randy Abrams (ran...@microsoft.com) wrote:
> : Exactly. I think it would be more convenient if there was a standard one,
> : but if each vendor wants to do their own that can work as well. This leaves
> : us with boot sectors tests.
> :
> : Regards,
> :
> : Randy
>
> Randy, my Virus Simulator has established itself as the industry standard.
in what industry would that be? it sure ain't the anti-virus industry...
maybe the virus industry, but that's not hard as most virus writers don't
charge people money for their wares...
Raid Slam
<cesc...@hotmail.com.toglimi> wrote:
> Hi guys!
> Where I can find viruses in the net? Are they operativ?
www.coderz.net/Raid and yes, they are operative; ready to run. :)
> Tanx for repaly
> a friend.
Your welcome.
* Sent from RemarQ http://www.remarq.com The Internet's Discussion Network *
The fastest and easiest way to search and participate in Usenet - Free!
Fridrik Skulason
>This sounds like an excellent approach to me. The macro test could be pretty
>easily typed in by many users,
easily, yes....identically? are you *sure* that one would not type in
a few spaces where another would just hit TAB? That would make the macros
different on the bit level and mess up the exact identification...and for
the same reason as in the case of the EICAR COM file, the macro should
be detected only if it is *exactly* as it is supposed to be.
Randy Abrams
news:7tj8pr$g18$1...@banani.complex.is...
> In <uI0DIwOE$GA.306@cpmsnbbsa03> "Randy Abrams" <ran...@microsoft.com>
writes:
>
> >This sounds like an excellent approach to me. The macro test could be
pretty
> >easily typed in by many users,
>
> easily, yes....identically? are you *sure* that one would not type in
> a few spaces where another would just hit TAB? That would make the macros
> different on the bit level and mess up the exact identification...and for
> the same reason as in the case of the EICAR COM file, the macro should
> be detected only if it is *exactly* as it is supposed to be.
>
> -frisk
You are, of course, correct. It is a problem today with the standard test
file. The O, or is that the 0 is easily confused. It hasn't been
insurmountable though.
Regards,
Randy
--