Re: Malware database

Tricky little subject. Alex, I use Zone Alarms and Malware Bytes to 
check everything I download before I open it. I periodically run Emisoft 
and Pavark, and occasionally Live One Care Scanner - Protection 
(only)(Microsoft) which is the one that finally got the MereWorm off my 
laptop.Both Malware Bytes andd ZoneAlarms integrate into the right click 
context menu and both have an on line lookup that goes to their 
database. The problem, as others have suggested, is that the people who 
do these malicious acts have become very clever - often naming their 
crap with the .exe of a legitimate program.  The kind of sites others 
have mentioned will show a percentage which say a particular file is 
infected and a percentage will not. When you run the scans, exclude 
false positives on files you have had for years and know are safe. 
Quarantining doesn't hurt anything because the file can be restored 
latter if you find it to be safe. As for imaging, I assume you mean a 
"cloned" backup. I do that, but the danger is that if you don't know 
exactly when you got the virus, spyware, whatever, you may be 
reinstalling it.

Hope this helps.
Jay

On 1/14/2011 9:18 AM, Huffen Doback wrote:
> I came across an error the other day that I suspected to be from some
> form of malware, but I couldn't exactly pin it down.  I googled the
> process in question, srvpool.exe, but couldn't really find any
> definitive answers.  I ended up reimaging the computer just to play it
> safe.  But this whole experience made me start looking for some kind
> of malware/virus database that contains information about known
> malicious threats, but I couldn't really find anything.  Is there
> anything, aside from simply googling, that serves as a database or
> wiki about known malicious software?
>
> -Alex
>
> ---------------------------------------------------------------------------
> This list is sponsored by: Black Hat
>
> Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier
> technical event for ICT security experts. Featuring 30 hands-on training
> courses and 90 Briefings presentations with lots of new content and new
> tools.  Network with 4,000 delegates from 70 nations.  Visit product
> displays by 30 top sponsors in a relaxed setting.
>
> http://www.blackhat.com
> ---------------------------------------------------------------------------
>
>

---------------------------------------------------------------------------
This list is sponsored by: Black Hat

Attend Black Hat USA, July 28-August 2 in Las Vegas, the world's premier 
technical event for ICT security experts. Featuring 30 hands-on training 
courses and 90 Briefings presentations with lots of new content and new 
tools.  Network with 4,000 delegates from 70 nations.  Visit product 
displays by 30 top sponsors in a relaxed setting.  

http://www.blackhat.com
---------------------------------------------------------------------------