Author Topic: Virus Submisions (What happens?)  (Read 3415 times)

0 Members and 1 Guest are viewing this topic.

Offline Jlo

  • Full Member
  • ***
  • Posts: 118
  • I'm a llama!
Virus Submisions (What happens?)
« on: September 05, 2004, 09:47:02 AM »
Hi,

I just wondered what happens with virus samples once they are sent in to Avast. I guess you would run them through your own scanner with latest prerelease VPS???. Do you manually check each file or have you an 'inhouse sandbox' to help identify malware over inocent files?

Would it be possible for one of the moderators to give 'the life of a virus sample' once it hits avast (or any) virus lab.

Just thought it would be interesting?

Cheers

Jlo

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9387
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Virus Submisions (What happens?)
« Reply #1 on: September 05, 2004, 09:57:05 AM »
They probably monitor samples in a controlled environment to see if it shows any viral activities. Or they disassamble the submitted samples.
But first one is easier. Even i use the first method. Just load up the sample and run it. All you have to do later is to check the symptoms.
Usually Regedit and Taskmanager refuses to run. This is the most common symptom.
Visit my webpage Angry Sheep Blog

Offline Jlo

  • Full Member
  • ***
  • Posts: 118
  • I'm a llama!
Re:Virus Submisions (What happens?)
« Reply #2 on: September 05, 2004, 10:07:40 AM »
Cheers Rejzor,

I was talking to Jotti on MSN and he suggested that many virus labs have 'an inhouse sandbox' to filter suspect files more quickly. Was just wondering if Avast uses that method.

Cheers


Jlo

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9387
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Virus Submisions (What happens?)
« Reply #3 on: September 05, 2004, 10:34:39 AM »
Yeah, i meant Sandbox with the "controlled environment"
Visit my webpage Angry Sheep Blog

Offline Jlo

  • Full Member
  • ***
  • Posts: 118
  • I'm a llama!
Re:Virus Submisions (What happens?)
« Reply #4 on: September 05, 2004, 12:21:42 PM »
Ok. Thanks for the reply.

Cheers

Jlo

Offline softwareguy

  • Sr. Member
  • ****
  • Posts: 245
  • WARNING! Worm Found!
Re:Virus Submisions (What happens?)
« Reply #5 on: September 06, 2004, 09:27:10 AM »
Virtual PCs... Best friends! :P

Avast - Your Worms Extinguisher