This question quite amazes me. I dont understand how antivirus companies get info about the latest viruses. have they installed some kind of filters to monitor the internet traffic ? Or they are purely dependent on sites like www.virustotal.com and similar ? If thats the case, then why some companies create a patch first, and other companies dont even know about that virus ?

Please clarify.


Various methods can be used:

  • Samples are sent in by customers
  • Malware detected by heuristic scanners (i.e. stuff that behaves like a virus) is further analysed
  • Mail blocked as spam can be analysed for malware attachments.
  • "honeypots", which are public servers or email addresses designed to collect malware
  • going undercover in malware writers communities
  • Now I'm imagining new guys approaching malware communities having to so some "being evil" test before being accepted... – o0'. Mar 16 '14 at 9:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.