VCM4: Antivirus with detected virus lists
Antivirus with detected virus lists
by VirusBuster
Creating a list of detected viruses is used to know what you miss from an antivirus.
There was a time when not so many detections were being added to antivirus definition databases. That time was not so long ago and then if you wanted to "improve" your virus collection you could create a list of missed samples for e.g. AVP and try to search and find some of them.
Actually this is a lost art which is performed rarely, just for special situations like a new breaking worm. Anyway I consider VCM would not be complete without explaining how to get antivirus detection lists.
First I must say that not all antivirus allow the user to create a list.
KAV:
KAV makes our collector life easier supplying a tool to generate lists of detected viruses, malware, etc.
This tool is titled "Kaspersky Virus List Generator". You just need to introduce the name of the report and generate the list.
The generated report will not be valid to be used with VS2000 directly. You can convert it to a valid format using next commands:
VS2000 -DR REPORT.LOG .avc~9,.avc~20
VS2000 -DR REPORT.LOG .avc~20,.avc~9infected:~20
F-Prot:
In order to get the list of detected samples you must use F-Prot for DOS and use next command line:
F-PROT /VIRLIST >F-PROT.TXT
You must process the generated list in order to get a processable log.
BitDefender:
In order to get the list of detected samples you must use BitDefender console and use next command line:
BDDOSC /LOG=BD.TXT /VLIST
You must process the generated list in order to get a processable log.
Panda:
In order to get the list of detected samples you must use Panda console and use next command line:
PAVCL -lis -auto >>PANDA.TXT
You must process the generated list in order to get a processable log.
Sophos:
In order to get the list of detected samples you must use Sophos for DOS and use next command line:
SWEEP -DL -NK >SOPHOS.TXT
You must process the generated list in order to get a processable log.
Avast:
In order to get the list of detected samples you must use Avast console and use next command line:
ASHCMD --console --viruslist >AVAST.TXT
You must process the generated list in order to get a processable log.
If you know any other antivirus that allows creating a detected virus list would be cool if you send a report about it to virusbuster@terra.es.
