Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Virus
[Top] [All Lists]

Re: what is the best procedure to track down a potentially new virus/wor

Subject: Re: what is the best procedure to track down a potentially new virus/worm/etc?
Date: Tue, 14 Dec 2004 13:14:20 -0800
Rodrigo Ventura wrote:

I have a couple of PCs (running XP) which I'm sure are infected with
some kind of malware. Common anti-virus such as OfficeScan and
Symantec do not detect them. They seem to be irc bots. They try to


...

My question is, what do you think is the best procedure to track down
the executables responsible for this behavior? After tracking them
down, I could submit the sample to several online scanners in order to
determine which specific malware is affecting the PCs.



Do you read the newsgroup alt.privacy.spyware? They discuss this stuff.

On the web, try:

http://www.nondisputandum.com/html/anti_spyware.html

And regarding the IRC server IPs, is it worthwhile to report them to
the authorities specified in the whois databases?


I don't know. Maybe if you have nothing but time...

--
Phil Nelson

<Prev in Thread] Current Thread [Next in Thread>