Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Many moons ago, I seem to remember that it was relatively easy to find information on what was the behaviour of particular pieces of malware (as in, "inserts automatic start-up items in registry, collects passwords from x, y and z locations, connects to IRC at xxx.xxx.com" etc. etc. This would usually be followed by removal instructions (which could be "reinstall OS").

However, this does not seem to be the case anymore, at least if Google is taken as a source of information. Searching for malware on Google by name seems to be more likely to lead you to pages owned by scammers trying to get you to install something than to useful information, and even the websites that belong to companies that make anti-malware software are very light on tech info.

So, the question is... is there still a reliable source of (detailed) technical information on malware behaviour somewhere on the net? Web forum, mailing list, newsgroup...?

share|improve this question

3 Answers 3

up vote 0 down vote accepted

Any of your major Antivirus vendors will have a database detailing behaviors.

And F-Secure's that John T has already listed.

share|improve this answer
    
you got the same problem with symantec's threat explorer! seems they just don't want to be linked. :) –  Molly7244 Aug 27 '09 at 0:08
    
Hmm. Works for me... –  squillman Aug 27 '09 at 0:23
    
weird, i'm getting a Symantec page all right but says 'Page not found' –  Molly7244 Aug 27 '09 at 0:31
    
Hmm again. Yep, I get the Page Not Found now using FF. Works for me in Chrome. –  squillman Aug 27 '09 at 0:50
    
Works in IE8 also. Must be a FF thing. –  squillman Aug 27 '09 at 0:55

F-Secure has a virus & spyware description database which outlines detailed information on what each malicious piece of software does.

share|improve this answer

So does Symantec. You may think of their software whatever you want, but their virus database (now known as Threat Explorer) has always been a first class resource.

share|improve this answer
    
"Page Not Found" - I don't think your helping the companies reputation here :P –  John T Aug 27 '09 at 0:00
    
cheers, edited the link. –  Molly7244 Aug 27 '09 at 0:04

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.