Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | Re: what is the best procedure to track down a potentially new virus/worm/etc? |
|---|---|
| Date: | Tue, 14 Dec 2004 13:14:20 -0800 |
Rodrigo Ventura wrote:
I have a couple of PCs (running XP) which I'm sure are infected with
some kind of malware. Common anti-virus such as OfficeScan and
Symantec do not detect them. They seem to be irc bots. They try to
...
My question is, what do you think is the best procedure to track down the executables responsible for this behavior? After tracking them down, I could submit the sample to several online scanners in order to determine which specific malware is affecting the PCs.
Do you read the newsgroup alt.privacy.spyware? They discuss this stuff.
On the web, try:
http://www.nondisputandum.com/html/anti_spyware.html
And regarding the IRC server IPs, is it worthwhile to report them to
the authorities specified in the whois databases?
I don't know. Maybe if you have nothing but time...
-- Phil Nelson
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | what is the best procedure to track down a potentially new virus/worm/etc?, Rodrigo Ventura |
|---|---|
| Next by Date: | Re: what is the best procedure to track down a potentially new virus/worm/etc?, John Barton |
| Previous by Thread: | what is the best procedure to track down a potentially new virus/worm/etc?, Rodrigo Ventura |
| Next by Thread: | Re: what is the best procedure to track down a potentially new virus/worm/etc?, John Barton |
| Indexes: | [Date] [Thread] [Top] [All Lists] |