I have often suspected that virus scanner companies funded some secret offshore teams to write viruses. Until the recent spam zombie botnets, most viruses were surprising benign (but scary enough to garner media hype and virus scanner sales). If a virus writer was truly malicious, it would be trivial for their virus to delete the user's hard disk (after first propagating itself, of course).