[88851] in North American Network Operators' Group
Re: Quarantine your infected users spreading malware
daemon@ATHENA.MIT.EDU (Gadi Evron)
Tue Feb 21 08:36:07 2006
Date: Tue, 21 Feb 2006 15:32:58 +0200
From: Gadi Evron <ge@linuxbox.org>
To: Michael.Dillon@btradianz.com
Cc: nanog@merit.edu
In-Reply-To: <OF0A1CCB54.8212F6D7-ON8025711C.0046714F-8025711C.0047B7B7@btradianz.com>
Errors-To: owner-nanog@merit.edu
Michael.Dillon@btradianz.com wrote:
> If AV software can protect itself this way, why
> would anyone build an infection blocker using
> any less protection?
AV software can *try* and protect itself in this and other ways, but
that is OT to NANOG. I don't mind discussing it in private though if
software protection reversing technology interests you. :)
Gadi.
--
http://blogs.securiteam.com/
"Out of the box is where I live".
-- Cara "Starbuck" Thrace, Battlestar Galactica.