What I have to know about malware before start testing security software?

WinAndLinuxTutorials said:
I opened Malware Domain List to get some malware links, but I found many kinds of malware there, which one I have to select?
Click to expand...

I would like to recommend you reread Jacks first response in this thread, testing,even in a virtual environment can be dangerous. When I first started, I had two old Dell towers to test on, ones i did not care if anything happened too.. I also had my operating system and drivers on CD in case anything happened, i could always boot from the BIOS to force the CD to load first and wipe the drive and start over. There is more to this then just throwing malware at a product and seeing if it will remove it. Learning the different aspects of malware, what they do and how they effect the system is essential.. I would do a lot of research before even beginning to start. Learning to repair what the malware does to files upon removal is just as important as removing them, systems can become corrupted, ect..
 
Remember some links could be a nasty and make it infect in just a seconds. Especially like rootkits which they are really nasty and huge damage can do in a system.
 
I suggest you keep something like Process Explorer open. Download the malware, run it, and see if a process is created.

Certain programs (like CIS) will allow processes to start but keep them sandboxed. Keep that in mind.
 
jamescv7 said:
Remember some links could be a nasty and make it infect in just a seconds. Especially like rootkits which they are really nasty and huge damage can do in a system.
Click to expand...

Don't worry, I will be using Linux as a host OS and a Windows 7 VM to test.
 
Hungry Man said:
I suggest you keep something like Process Explorer open. Download the malware, run it, and see if a process is created.

Certain programs (like CIS) will allow processes to start but keep them sandboxed. Keep that in mind.
Click to expand...

I have prepared all the programs required like Process Explorer as a process manager, and scanners like Malwarebytes, Hitman Pro, etc. to scan the VM after completing the test.
 
yes you can start your tests. btw if you can test Webroot SA beta... :D
 
^^BTW, which OS I have to use in a VM for malware testing, Windows XP, Windows Vista or Windows 7?
Windows XP has the least security, Windows Vista has more security than XP, and Windows 7 has even more security than Vista. So I think using Windows Vista because it is a balance between the two, what do you think?
 
use the one u are using actually, so you will know your weaknesses.
 
If you're testing malware I would suggest Windows XP 32bit since it has the least security and you get the "worst case scenario." While 7 users may be protected from some of your results it's best to see how all of the malware runs.
 
WinAndLinuxTutorials said:
^^BTW, which OS I have to use in a VM for malware testing, Windows XP, Windows Vista or Windows 7?
Click to expand...

Depends on what OS you are comfortable testing on and if your system can handle it. Chose between Windows XP SP3 or Windows 7 - both require less resources and run lighter (*more responsive, less sluggish performance) than Windows Vista.

Windows XP is a 10 year old OS (and imo isn't meant for 2011 usage)
Windows 7 is a 3 year old OS (and is similar to Windows Vista)

Take your pick, but I don't recommend installing Windows Vista on the VM.
 
Earth said:
WinAndLinuxTutorials said:
^^BTW, which OS I have to use in a VM for malware testing, Windows XP, Windows Vista or Windows 7?
Click to expand...

Depends on what OS you are comfortable testing on and if your system can handle it. Chose between Windows XP SP3 or Windows 7 - both require less resources and run lighter (*more responsive, less sluggish performance) than Windows Vista.

Windows XP is a 10 year old OS (and imo isn't meant for 2011 usage)
Windows 7 is a 3 year old OS (and is similar to Windows Vista)

Take your pick, but I don't recommend installing Windows Vista on the VM.
Click to expand...

Why it's not recommended to install Windows Vista on a VM?
 
WinAndLinuxTutorials said:
^^BTW, which OS I have to use in a VM for malware testing, Windows XP, Windows Vista or Windows 7?
Windows XP has the least security, Windows Vista has more security than XP, and Windows 7 has even more security than Vista. So I think using Windows Vista because it is a balance between the two, what do you think?
Click to expand...

For me if you have enough RAM then you can go Windows 7 for testing purpose.
 
WinAndLinuxTutorials said:
Why it's not recommended to install Windows Vista on a VM?
Click to expand...

because it is useless, if you have enough RAM, use windows 7, more users, better OS.
 
You must log in or register to reply here.

You may also like...