Interview with MGL
by Cicatrix
[August 1997]

How did you start out in computers?

When i was 'bout 11 or 12, we had an school excursion to some weirdo named research institute. But, unfortunately, the institute had something to do with computers and i was right fascinated with all the stuff i saw there.

<some time skipped>

Got my first computer (do not remember the name), saled it after 2 weekz to but that new Atari 800 XL (really). After the 8 bit era I started to save money for some 286 ...

How and when did you start out in the virus scene?

One friend of mine did some virus analyses, I was keen on the stuff, but nothing more. Then i meet a guy on our school computer lab, which was coding somethin' in assembler, the proggie was real tiny and did so much... The guy was future JX from SVL, so we hold a speech and .... You know already :)

Have you written viruses? If so which would you like to take credit for?

I did. I do. I'll do. Only the time is problem. I lacks of it in last time.

How do you name your viruses?

At will.

Which programming languages do you know?

C,asm,pascal,basic

What programming language do you like using the most?

asm

Are you a member of a VX group?

No, i was member of SVL for some time, but after it's end i am some kind of freelance virus coder.

Which AV software do you like/respect the most? Which the least?

Well, based on my own experiences, and naturally assumption that every sane user (but there is not such a lot of this kind) uses antivirus software produced by local vendor, i respect slovak one. This program is named NOD-ice, and has to the great unpleasure of us, virus coders, very sophicticated heuristics. It is, in my opinion, one of the foremost AV programs in the world. Simply to express how good it is, just one quotation:

Sepultura:

"I do not know what methods ICE-NOD uses, but it is very good too"

If your virus passes without detection by NOD, it passes every antivirus. And that's why i use this one for testing my viruses. And i highly recomend to other authors the same.

What are your goals (VX wise)?

Same as the others have: to write kick the ass virus, that'll spread across the world in 48 hours. :P

What is your view on the continuous 'war' between VX and AV.

It is not about the war. It is most likely the brain contest. But on the virus side, there are no prices. The AV side of the force offers much more : money, car, house, career etc... But i am not interested in. Besides many of the AV seems to be assholes, but actually not all of them.

Where did you get you handle? What does it mean?

Well, is my old nick. And it sounds good quit good. So i keep supporting it.

What is your view on Virus Creation software (eg. VCL, PS-MPC etc.)?

For it's authors it was just challenge, to bring the proof it could be done. The practical effect of existing virus creators is none. Every virus produced this way is lame. But maybe, in the future someone with nothing to do, with necessary knowledges and abilities 'll write a break through in the creators, with generating own poly engines etc. This threat is most likely only my fantasy.

What is your view on macro viruses vs. assembly or HLL viruses?

Macros' are easy to code, the documents are moved from one to another PC much more than programs, so they can spread fast and far. Probably multiplatform macros 'll appear. Here is the playfield wide open. HLL viruses are lame but on the other hand are problem for AV companies. HLL viruses can't be identified by heuristics, its spread is very limited and to get sample not so easy. But they have no great future. HLL writing author has to switch to asm or to go. Asm 'll persist and survive. The perspectives of powerfull combination of asm and macroviruses ...

Have you ever confirmed one of your viruses 'in-the-wild'?

Yes i do. I check Joe Wells' list on regular base.

Which VX E-zine do you like to most? Which the least?

Most: *-Zine of cos, then VLAD and IR.

Which individual or what group do you like/respect in the VX world?

Vyvojar, Qark, Quantum & the rest of VLAD dudes, IR gang, Methyl (for his emulations) and all that wish to remains anonymous or i forget to include here.

In the AV world?

NOD programers, Dr. Solly, Frisk, f/win

Which individual or what group do you like/respect outside the VX or the AV world?

Russians

What is your view on destructive payloads in viruses?

Here is MGL's equation (*)

                                               V*I(t)
    amount_of_destruction_in_virus =  -----------------------------
                                      programing_abilities_of_coder

    V       - constant value, varies from one author to another
    I(t)    - Inteligence of the author in time t

    * - if used again, i should be given a credit for it. :)

Do you think there is such a thing as a 'good' virus?

This question reassembles one of Vesselin's articles :) Why not ?

What do you do in 'real' life?

I try to earn some bucks :)

Do people outside the VX scene know what you do (parents, girlfriend etc.)?

I do not know.

Do you do other computer stuff outside VX (Hacking, phreaking, warez etc.)?

warez, would like to phreak

Should viruses be illegal? Is there a difference between creation and spreading?

Viruses illegal ? It'd just add another kewlness to write a virus.

Describe the perfect virus.

I did :)

What is your view on Windows (95)?

Large scale beta test in which beta testers are forced to pay for participation

What is your advice for people just starting out?

Learn assembly language, obtain Ralph Brown's Interrupt list.

Get Borland C++ 3.1, Watcom 10.5, Soft-ice debuger, any AV programs and viruses available, get zines, get VDAT and code.

Do not forget IDA !
And, to join the scene try IRC #virus (Efnet,Undernet)

Where can you be reached if at all?

My email is known to some ppl, and sometimes i hit the IRC

Any greets?

Well, AV ppl, if you 'll be interested in making interview for *-Zine, mail me to asterix_zine@hotmail.com

Any other comments?

Remember Black Baron !

Short responses to the following names or words:

    - Dark Avenger          retired legend
    - Dark Angel            good tutes
    - Sarah Gordon          she's psycho
    - Fridrik Skulason      \
    - Alan Solomon          - i would like to have interview in our next
                            issue
    - WordBasic/VBA         :)
    - VDAT                  probably most complette source of
                            informations one needs to write a virus
                            assembly language knowledge assumed :)
    - VSUM                  it is not known what this Patty does
                            besides replicate
    - Assembler             which one ?
    - NuKE                  dead
    - Phalcon Skism         dead
    - VLAD                  hibernated
    - Immortal Riot         alive
    - Trident               past
    - Polymorphic           necessary
    - Stealth               almost dead
    - I hate......          idiots
    - I love......          [HTML incompatible symbol] ASCII 003
    - Internet              information should be 3
    - IRC                   Efnet,Undernet #virus
    - Sex                   Read my lips .....
    - World War 3           bullshit

How is the virus scene in Slovakia?

We, the old generation are heading to make some serious money. But most of us has some good ideas for viruses. Pitty we have not that much time. But on the other hand, scene is stable, we have new additions, the recent ones are quit valuable. In last year slovak VX scene did two big things. One was the TMC virus, which has been in the wild in Slovakia, but did not get not only into the Joe's supplementary list (Barnabas Nagy is probably asshole, or Joe is ignoring at least some contributors). Second reinforcement are Ugly Luser and Nasty Lamer, authors of first two slovak macroviruses, Uglykid and Slow (aka Slovak dictator). Generally the W95 beta test slowed down the scene movement.

Will you ever release a virus creator?

No. Is is not effective.

What is in your future and the future of Asterix Zine?

As for me, i am heading for next issue ... and to finish at least two more viruses.