I know a couple of virii writers and they think of themselves as whitehats. They do research in to vulnerabilities (in this case propagation of unwanted code), write a POC of it to test it and then...