How to compare against WildList.org
Submitted by ilooked4u on Wed, 2009-11-25 01:58.
Generic Discussion
Hi,
I have a modest collection of recent malware, about 100.000 samples - I wanted to see what percentage of my samples actually appear in the latest WildList, from October 2009, found at:
http://www.wildlist.org/WildList/200910.htm
Is there a way (method, tool, etc.) to do this - in its current form (my md5 hashes vs generic virus name listing of WildList) this seems an impossible task.
Regards,
ilooked4u
Could you elaborate?
Submitted by ilooked4u on Wed, 2009-11-25 12:58.
I don't quite understand what you mean by "invented" - could you please explain?
Identification names does
Submitted by VirusBuster on Wed, 2009-11-25 23:30.
Identification names does not correspond to any antivirus. They create the names.
OK, understood ... so
Submitted by ilooked4u on Thu, 2009-11-26 04:45.
OK, understood ... so effectively the WL has no use, right?
If you don´t belong to
Submitted by VirusBuster on Thu, 2009-11-26 05:44.
If you don´t belong to WildList organization, not really.
It doesn´t matter what
It doesn´t matter what information you got (MD5, SHA-1 or whatever hash). WildList detection names are "invented" so it´s impossible to compare them with anything.