submitting malware?

[Dan]

Are you guys interested in malware/spyware/adware
submissions? I don't see a place to submit anything. Not
that there's any dearth of this available, but just for
the sake of building a complete collection...

 

[Bill Sanderson]

You can submit as from the system explorers in advanced tools, as I recall.
Yep - highlight, and click "send to spynet for analysis" in the lower right.

 

[Alex Butler]

Yes, this doesn't seem to work on my machine.
I found a spyware file similar to another threat (that keeps coming back for

some reason!!!)

So I was submitting the report to MS, got all the way to the end and now

it's moaning about proxy server, when I have a primary dns server and

default gateway setup!!! The updater doesn't moan or seem to have any

problems?!?!?!?!? I don't get it.



Is there aplace where I can manually submit the report I was going to send?

 

[Mark L. Ferguson]

Several people have reported various reasons for the proxy error. Sun Java VM? Non-MS browser, like firefox? Try later, server down?
If another browser, use the IE settings to disable proxy.

IE, tools, options, connection tab, lan settings button, uncheck all boxes.

 

[Alex Butler]

I don't have any proxy settings, thats problem, there none to adjust for the
thing to work, I have no clue why thing is moaning about it as no other app
moans about proxy!!

Several people have reported various reasons for the proxy error. Sun Java

VM? Non-MS browser, like firefox? Try later, server down?

 

[Bill Sanderson]

I don't know what breaks in that mechanism, just that it definitely breaks.
It does make use of the IE proxy settings, so, for example, if you tell it
to use a proxy and leave the proxy name blank, it appears to hang
forever--or at least longer than I had patience to watch it.

 

[Alex Butler]

I solved it! Well kinda, I just shut the Antispyware program down, some how
it had got it's knickers in a twist. Resarted it and it worked fine. bit of
a non problem (mine that is)

 

[Bill Sanderson]

It seems to have that problem more than it should.

If you or others in this thread have a binary you would like to get to a
group of experts for further examination, here are a couple of resources:

1) http://www.virustotal.com/flash/index_en.html

This site lets you check a file against multiple antivirus engines in one
submission.

2) If you have an unknown binary which looks like spyware to you but which
Microsoft Antispyware doesn't catch, you can zip it up, password protect the
zip file, and mail it to:

(e-mail address removed)

putting the password for the zip in the email.

This is another Microsoft MVP who can pass it on in various ways. If the
file is a known virus, it probably won't get to him--Gmails antivirus is up
to snuff.