I have a great deal of frustration with some antivirus products as our long term readers might be aware. A couple sites that I have started using (which I should have been using for some time) are Virus Total.com and Jotti.org. These are sites where you can upload suspected malicious software and then have it run through a gamut of virus scanners with the latest signatures. There are others out there but, the point of this is to share it with the readership. The reason behind this is that I have encountered behaviour in come AV products that made me wonder if it was losing its marbles and I want to check against other clients.
For a lot of you the sites are akin to discovering Tuesday. However, folks don’t all start by going to 11. So, if you have other sites that you use feel free to share them. There are also malware search engines that I tend to use such as Offensive Computing. Incidentally, Offensive just received a “bad” rating from McAfee’s SiteAdvisor (if you use that) for which they really can find no issue. After all there is malicious code being researched there.
Anyway, I just thought I’d share those links. Have any you’d like to share?
[tags]Antivirus, Malicious Code, [/tags]
Norman Sandbox (Similar to VirusTotal):
http://www.norman.com/microsites/nsic/
ExploitSearch (A simple custom Google search):
http://exploitsearch.com/
Milw0rm (Most current exploit code winds up here):
http://www.milw0rm.com/
PacketStorm (Still going strong):
http://packetstormsecurity.org/
Secunia (Most public vuln advisories wind up here):
http://secunia.com/