Re: [Openantivirus-discuss]Re: virus code is never executed - virus or not?]

[Antony S. <Antony@Soft-Solutions.co.uk>]

On Sunday 11 January 2004 2:04 pm, Fridrik Skulason wrote:

>   3) If the virus code does not get executed, the ideal behaviour would
>      be to report the program as corrupted by the "so-and-so" virus,
>      but failing to report the virus at all, or allowing the program
>      to execute is not really a "failure" as such... there is no active
>      virus in the program.

How do you know whether the virus code gets executed without performing an 
exhaustive test on what the entire code does under all input conditions?

I think it is not possible to say for certain "this code (does | will) not get 
exectued" (this is the sort of thing proved by Turing and Church quite some 
time ago), therefore if viral code is found it should be reported as such.

Antony.

-- 
If at first you don't succeed, destroy all the evidence that you tried.

                                                     Please reply to the list;
                                                           please don't CC me.