For sale, CIH virus complete with source code............one careful lady owner.............
Actually you used to be able to buy CDs full of viruses, but I don't think they had the source with them.
I also remember an AV product called e-safe (?) by Aladdin Industries where you could tell it that it was scanning a virus collection and it would just report what it found rather than trying to quarantine/delete everything in sight. It sort of appealed to my sense of paranoia as it even complained when it was updating itself
