Virus trading

Hi malware fighters,

Not particularly my kettle of fish, but there are people on the forum delving into virus trading. What makes people starting their collection, a malware collection isn’t like a collection of rare stamps. Read this:
http://vx.netlux.org/lib/static/vdat/epaovcol.htm and here:
http://vx.netlux.org/lib/cta00.html

Who is in to this? And for what reasons?

polonus (malware fighter)

OK, why to collect all these nasty things, as I’m spending a lot of time trying to keep my system secure. Let’s see… I’m going to reinstall my pc with Windows XP v.2002 without any updates and to surf via NET with IE6. No any security software or firewall. I thing after one week my pc will be totaly death, but I’ll have very big collection of nasty things ;D

I think these links should be kept of generally available forums like this, an anti-virus support forum.

I don’t believe we should encourage virus collection (or provide links that might indirectly provide that information) as we don’t know just who would be viewing this and what their level of competence/protection is so that these collections don’t escape their system and infect others.

Hi DavidR,

I haven’t put any links to live virus.
Dr.Web (R) daemon for Linux v4.33 (4.33.0.09211)
Copyright © Igor Daniloff, 1992-2005

Last update time: 2006-06-14,17:16:13

File size: 46010 bytes

epaovcol.htm - OK

I only put this here, to explain why some are into this. There are actually people here in this forum interested in free virus pools, examples, honeynets etc. So the people that try to boost up their AV scanner of choice, also in a dubious way, are already among us. In a funny way, they think according to the line “this scanner loves me”, if I feed it enough virus definitions, this choice product of mine will be number one". A weird sort of reasoning, because this is actually not what malware fighting is about. You do not have to be a malware author or a “herder of malicious code” to be a good supporter of an AV product.

Not that I agree with their attitudes, but I’ll try to understand their mentality, and this should be generally known to members of this community. I just wanted to mention this. Things are not going away, by just ignoring them. You cannot think weird things away, by not giving it any attention.

polonus

It is the placing it here (I also checked them with DrWeb) that may cause a problem, rather it may promote peoples interest in this sort of thing and I don’t think that is what we should be encouraging in an anti-virus support forum where we don’t know whose interest might be aroused in virus collection/trading or for what purpose.

There are actually people here in this forum interested in free virus pools, examples, honeynets etc. So the people that try to boost up their AV scanner of choice, also in a dubious way, are already among us.

Which would also tend to support my thoughts and in which case it should be for their personal consumption via IM and not generally available for anyone.

IMHO, we’re here to keep our computers clean.
It’s Alwil’s responsible to make sure that the nasties don’t get to us.
It’s also their job to collect the nasties. Not ours.
Unless you’re in the A/V business, the last thing you want or need is a virus.