Need to download a virus for my virtual machine - where from?

[joydivision]

I want to do some manual removal and have setup an XP Home virtual machine. I have googeled all the classics but I cannot find anything.

Where shoudl I start?

 

[NickCat11]

http://www.technibble.com/forums/showthread.php?t=9111&highlight=malware+download

 

[iisjman07]

You can download zero-day malware from the MalwareBytes forum...
here you go - http://www.malwarebytes.org/forums/index.php?showforum=30

 

[joydivision]

Thanks you're a star

 

[joydivision]

Ok I can now remove 6 different infections this is the method I have developed in case any body is interested, I like it because it involves hardly any software, it is similar to Boyces method.

1) Run process explorer
2) Remove anything that should not be there and check the location
3) Delete files
4) Go to MSCONFIG and remove any unwanted startup items
5) Use regedit and remove the unwanted startup entries (this just cleans it up)
6) Check the usual windows/drivers/ windows/system32 windows /system and windows root folders for any dlls etc that should not be there.
7) Do a spyware scan to make sure nothing is missed.
8) Be very proud that the anti spyware program finds nothing

Of course in the real world it will be a lot harder.

 

[iisjman07]

6) Check the usual windows/drivers/ windows/system32 windows /system and windows root folders for any dlls etc that should not be there.

Keep in mind that malware (particularly rootkits) can use advanced hiding techniques, so they may not always be visible from the host operating system.

 

[joydivision]

Yep indeed but since this is a virtual machine it is impossible to load windows boot CD or something.

 

[iisjman07]

Yep indeed but since this is a virtual machine it is impossible to load windows boot CD or something.

What virtual machine software are you using? Nearly all can load boot cds/iso images of boot cds - I use the free VirtualBox and that can easily

 

[joydivision]

VMware player. Of course it will boot CDs I had to boot a CD to install windows but I cannot run a boot cd because the virtual machine I made would not be detected.

 

[iisjman07]

VMware player. Of course it will boot CDs I had to boot a CD to install windows but I cannot run a boot cd because the virtual machine I made would not be detected.

Ah, I see...................................................

 

[allanc]

Yep indeed but since this is a virtual machine it is impossible to load windows boot CD or something.

I have started to work with Virtual Box.
Host is Vista Home.
Client is XP PRO sp3.
I can boot of the Ultimate Boot CD for Windows and the Virtual Box client is the 'C:' drive.
Is that what you are trying to do?

 

[joydivision]

Yep but in VMware player there is no BIOS as such, it hides all that it does not give you the option to boot from CD. You can boot from CD but then it becomes a new virtual machine with a brand new C: drive.

I will have a look at the virtual machine you're using.

 

[allanc]

Yep but in VMware player there is no BIOS as such, it hides all that it does not give you the option to boot from CD. You can boot from CD but then it becomes a new virtual machine with a brand new C: drive.

I will have a look at the virtual machine you're using.

PM if you need the settings to modify.