Description of threats

[Paul Blueberry]

If Avast detects a threat, it names it with a specific name, e.g.:

• URL:Malvertising
• URL:Blacklist
• HTML:Script-Inf
• Script:SNH-gen [Trj]
• Win64:Evo-gen [Trj]
• Win32:Kryptik

Given such a name, if I want to know more about the threat, is there a database online, in which I can look the name up?

[polonus]

Hi Paul Blueberry,

Yes, there are several online resources where you can look up specific malware names
or threat detection labels provided by antivirus software like Avast.

Here are a few options:

VirusTotal: A popular website that allows you to upload files or enter URLs to scan for malware.
It provides information about detected threats, including detailed descriptions and links to references.

Website: virustotal.com

Malwarebytes Labs: Malwarebytes has a blog and a threat centre
where you can search for information on various malware threats,
including detailed descriptions and removal instructions.

Website: malwarebytes.com

Symantec (Norton) Threat Explorer: Symantec provides a database of viruses, spyware,
and other forms of malware, which you can search to find more information on specific threats.

Website: symantec.com

Cisco Talos Intelligence Group:
Cisco Talos provides threat intelligence and analysis, including information on various malware strains.

Website: talosintelligence.com

Malware Information Sharing Platform (MISP): MISP is an open-source threat intelligence platform
that allows users to share and search for various types of malware and Indicators of Compromise (IoCs).

Website: misp-project.org

AV-TEST: AV-TEST is an independent research institute for IT security
that analyses and evaluates antivirus software.
They publish information on various threats.

Website: av-test.org

You can use these resources to search for specific threat names to gather more information about their nature.
impact, and recommended actions.

polonus

[Paul Blueberry]

Based on your other and this answer I think oftentimes you just

• copy the question from this forum,
• enter it to a GenAI service,
• copy the answer back here,
• write your name on it, as if it was written by you, and
• post it.

Would you please stop doing that? At least to me. And, if you do this for others, please let them know, that this is AI-generated. Don't pretend, that you wrote it.

[polonus]

Hi Paul Blueberry,

This a wrong assumption by you. In 3rd party cold recon website security and website error-hunting I have 22 years of experience here.
AI entered the game as an additional enhancement just since 2023. So who is to tell me here to refrain from using A.I. You.... and on what grounds? Avast is also using A.I. in their anti-virus (not mentioning it was applied). Did I hear you protest to that?

If you do not like people using A.I. (A.I. enhanced messages) (additionally, as I do not have the whole A.I. corpus available in another way), then you are reacting like once the people that ran in front of a steam engine, because it may have interfered with their cows' milk production. Are you also opposing users that use Quillbot to secure their PII and spell and grammer check? Do not use latest technology, it may upset you,

polonus

[DavidR]

@ Paul Blueberry
A very ungracious response when someone has taken the time to respond, no matter how they have come about the answer (which you don't know for sure).

People will simply stop responding to your questions in the forum.