network monitor to detect malware?

Discussion in 'Virus Information' started by John, Dec 28, 2009.

  1. John

    John Guest

    If a PC is infected by a virus, it is sometimes difficult to know or detect
    with virus scanner because most virus can cloak themselves. But they usually
    have some sort of LAN or internet traffic, either in an attempt to infect
    other PCs on the LAN, or to download "payload update", or to send off stuff
    collected (bank account info, ...).

    So, is there a network monitor specifically designed to detect virus
    activity on a home LAN that I can run on a dedicated PC?
     
    John, Dec 28, 2009
    #1
    1. Advertisements

  2. John

    rakesh Guest

    actually i'm also in search of such tool......
     
    rakesh, Dec 28, 2009
    #2
    1. Advertisements

  3. http://www.smoothwall.org/about/express-feature-list/ ?
     
    FromTheRafters, Dec 28, 2009
    #3
  4. From: "John" <>

    | If a PC is infected by a virus, it is sometimes difficult to know or detect
    | with virus scanner because most virus can cloak themselves. But they usually
    | have some sort of LAN or internet traffic, either in an attempt to infect
    | other PCs on the LAN, or to download "payload update", or to send off stuff
    | collected (bank account info, ...).

    | So, is there a network monitor specifically designed to detect virus
    | activity on a home LAN that I can run on a dedicated PC?


    Yes... and No...

    Most malware doesn't "cloak themselves", per se. For the most part the vast majorty that
    are not detected by a given anti virus are just not yet recognized via direct or heuristic
    detections. However some RootKit trojans such as TDSS (aka; TDL3) are able to cloak/hide
    form most anti virus applications.

    FireWall appliances *may* or may not be able to act as a network monitor. It would depend
    on the software on the appliance. Beacuse it is an appliance outside the operating
    envirment this cloaking becomes a moot point.
     
    David H. Lipman, Dec 28, 2009
    #4
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.