Full Disclosure mailing list archives
Re: Show me the Virrii!
From: S G Masood <sgmasood () yahoo com>
Date: Sun, 4 Jan 2004 12:40:09 -0800 (PST)
--- Richard Maudsley <r_i_c_h () btopenworld com> wrote:
Hi list, I recently finished a stable version of my little Virus-Scanner, LMS ( http://www.mindblock.org/lms ). It currently detects 19 viruses. I need it to detect hundreds. How do big Anti-Virus companies get their hands on new viruses, and how can I?
Various methods. Some of them are: 1. Since many of the big players are already very famous, their customers/general public send them samples of suspicious files. 2. They monitor email gateways. 3. They run large honeynets. 4. When their heuristic engines pick up new viruses automatically, they usually have some kind of an arrangement where they can pick up the binary from the customer. For example, their UI may have a button to automatically submit a quarantined file to the AV vendor for further analysis. 5. They *might* have an arrangement with each other to share samples. As to how you can get samples, I dont think it will be an easy job! You can monitor the various mailing lists and get samples when people post them. Or, if all you need are the signatures, maybe you can try reversing the signature databases of other software... Good Luck! -- S.G.Masood __________________________________ Do you Yahoo!? Free Pop-Up Blocker - Get it now http://companion.yahoo.com/ _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- Show me the Virrii! Richard Maudsley (Jan 04)
- Re: Show me the Virrii! S G Masood (Jan 04)
- RE: Show me the Virrii! Steve Wray (Jan 05)
- Re: Show me the Virrii! (heuristics) starlabs (Jan 05)
- Re: Show me the Virrii! (heuristics) S G Masood (Jan 05)
- RE: Show me the Virrii! Nick FitzGerald (Jan 07)
- RE: Show me the Virrii! Steve Wray (Jan 05)
- Re: Show me the Virrii! Nicob (Jan 07)
- Re: Show me the Virrii! Nick FitzGerald (Jan 07)
- Re: Show me the Virrii! Valdis . Kletnieks (Jan 07)
- Re: Show me the Virrii! Nick FitzGerald (Jan 08)
- Re: Show me the Virrii! S G Masood (Jan 04)
- Re: Show me the Virrii! Richard Maudsley (Jan 04)