My AV solution detected a program as a virus. Can someone point me in the right direction to learn more about the following points?
1) What exactly about the program was determined as the triggering factor? If a classification is given, such as "Trojan.something", do any AV solutions say exactly what the triggering factor was to place it in that category?
2) I know some people sandbox malware and learn what it's impact would have been. What is the best way to go about this? I assume there are better methods than simply making a trash VM with a debugger installed?