Focus on Virus
Malware database Jan 14 2011 03:18PM
Huffen Doback (huffen doback gmail com) (9 replies)
Re: Malware database Mar 01 2011 06:43AM
wt521125 (wt521125 yahoo com cn)
Re: Malware database Mar 01 2011 06:43AM
wt521125 (wt521125 yahoo com cn)
virus names used to be unique, but not so much any more.

prevx, for example, lets you search by filename. plenty of sites have nice
writeups of "what is file foo.exe and what does it do?" for legitimate
files. prevx mostly handles malicious files, and their writeups are vague
or misleading at best in that database.

as for fine grained details sandbox reports are very useful.
threatexpert.com is one of the more comprehensive and searchable. if you
have a file hash (md5) that's the best way to get such details.

virustotal.com is also a useful place to get pointers.

i do not trust or respect most AV writeups, they're very inadequate or
just plain wrong.

________
jose nazario, ph.d. http://monkey.org/~jose/

------------------------------------------------------------------------
---
This list is sponsored by: Black Hat

Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier
technical event for ICT security experts. Featuring 30 hands-on training
courses and 90 Briefings presentations with lots of new content and new
tools. Network with 4,000 delegates from 70 nations. Visit product
displays by 30 top sponsors in a relaxed setting.

http://www.blackhat.com
------------------------------------------------------------------------
---

__________________________________________________
¸Ï¿ì×¢²áÑÅ»¢³¬´óÈÝÁ¿Ãâ·ÑÓÊÏä?
http://cn.mail.yahoo.com

------------------------------------------------------------------------
---
This list is sponsored by: Black Hat

Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier
technical event for ICT security experts. Featuring 30 hands-on training
courses and 90 Briefings presentations with lots of new content and new
tools. Network with 4,000 delegates from 70 nations. Visit product
displays by 30 top sponsors in a relaxed setting.

http://www.blackhat.com
------------------------------------------------------------------------
---

[ reply ]
Re: Malware database Mar 01 2011 06:43AM
wt521125 (wt521125 yahoo com cn)
Re: Malware database Jan 14 2011 05:15PM
Jay Scalf (jayscalf comcast net)
Re: Malware database Jan 14 2011 05:08PM
Lorenzo Cavallaro (lorenzo cavallaro gmail com) (1 replies)
Re: Malware database Jan 14 2011 05:28PM
Huffen Doback (huffen doback gmail com)
Re: Malware database Jan 14 2011 05:00PM
Jason Iacono (jasonmiacono gmail com)
Re: Malware database Jan 14 2011 04:24PM
Jose Nazario (jose monkey org) (2 replies)
Re: Malware database Mar 01 2011 06:43AM
wt521125 (wt521125 yahoo com cn)
Re: Malware database Jan 14 2011 09:23PM
David H. Lipman (DLipman verizon net) (1 replies)
Re: Malware database Jan 17 2011 02:08PM
Jay Scalf (jayscalf comcast net)
RE: Malware database Jan 14 2011 04:14PM
Richard High (RichardHigh imgva com)
RE: Malware database Jan 14 2011 04:12PM
PEREZ, ROBERT (RAPEREZ VENTURAFOODS COM)


 

Privacy Statement
Copyright 2010, SecurityFocus