With respect to the students involved, the paper as presented is rather weak. The 'real' virus, they claim to demonstrate in the paper, is not a virus, just a self-replicating piece of SQL code.