malicious code lecture 20 28455