Focus on Virus
what is the best procedure to track down a potentially new virus/worm/etc? Dec 10 2004 06:50PM
Rodrigo Ventura (yoda isr ist utl pt) (5 replies)
RE: what is the best procedure to track down a potentially new virus/worm/etc? Dec 14 2004 10:21PM
Roger Padilla Jr (ropadill calpoly edu)
Re: what is the best procedure to track down a potentially new virus/worm/etc? Dec 14 2004 09:14PM
Phil Nelson (pdn PhilNelson DNSalias net)
Rodrigo Ventura wrote:

>I have a couple of PCs (running XP) which I'm sure are infected with
>some kind of malware. Common anti-virus such as OfficeScan and
>Symantec do not detect them. They seem to be irc bots. They try to
>
>
...

>My question is, what do you think is the best procedure to track down
>the executables responsible for this behavior? After tracking them
>down, I could submit the sample to several online scanners in order to
>determine which specific malware is affecting the PCs.
>
>
>
Do you read the newsgroup alt.privacy.spyware? They discuss this stuff.

On the web, try:

http://www.nondisputandum.com/html/anti_spyware.html

>And regarding the IRC server IPs, is it worthwhile to report them to
>the authorities specified in the whois databases?
>
>
I don't know. Maybe if you have nothing but time...

--
Phil Nelson

[ reply ]
Re: what is the best procedure to track down a potentially new virus/worm/etc? Dec 14 2004 08:25PM
John Barton (jbarton technicalworks net)
Re: what is the best procedure to track down a potentially new virus/worm/etc? Dec 14 2004 08:19PM
John Barton (jbarton technicalworks net) (1 replies)
Re: what is the best procedure to track down a potentially new virus/worm/etc? Dec 15 2004 01:56AM
Rich Gardner (rich gardner gmail com)


 

Privacy Statement
Copyright 2010, SecurityFocus