Re: How to learn virus analysis

["darrell j" <jfam343 () ameritech net>]

LBBCV was by Mark Ludwig.  Also there's a book out by Kris Kaspersky called
Hacker Disassembling Uncovered.
I've heard that a program called IDAPro by DataRescue is a good
disassembler.

Darrell
> ----- Original Message -----
> From: "Harris Samuel W PORT" <HarrisSW () mail ports navy mil>
> To: <security-basics () securityfocus com>
> Sent: Wednesday, August 27, 2003 1:38 PM
> Subject: RE: How to learn virus analysis
>
>
> > I remember from my computer security classes in college a book called
> > something like "Little Black Book of Viruses" Can't remember who it was
> by,
> > but it was pretty informative. I think it might be available somewhere
> > online for free.
> >
> > Sam
> >
> > -----Original Message-----
> > From: John Sec [mailto:john_sec_lists () hotmail com]
> > Sent: Wednesday, August 27, 2003 10:42 AM
> > To: security-basics () securityfocus com
> > Subject: How to learn virus analysis
> >
> >
> > I would like to learn how to disassemble/analyze virii, trojans, etc.
> I've
> > been teaching myself C and Assembly, but I still have a long way to go.
> Can
> > anybody recommend any books, tutorials, subjects, etc. that would point
me
> > in the right direction?  I know that it will take a lot of work before I
> get
> > to a point where I can do it, but I am really interested in it.
> >
> > Thanks for any advice.
> >
> > john
> >
> > _________________________________________________________________
> > MSN 8: Get 6 months for $9.95/month.
http://join.msn.com/?page=dept/dialup
> >
>
> --------------------------------------------------------------------------
> -
> > Attend Black Hat Briefings & Training Federal, September 29-30
(Training),
> > October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> > technical IT security event.  Modeled after the famous Black Hat event
in
> > Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> > Symantec is the Diamond sponsor.  Early-bird registration ends September
> > 6.Visit us: www.blackhat.com
>
> --------------------------------------------------------------------------
> --
> >
>
> --------------------------------------------------------------------------
> -
> > Attend Black Hat Briefings & Training Federal, September 29-30
(Training),
> > October 1-2 (Briefings) in Tysons Corner, VA; the world's premier
> > technical IT security event.  Modeled after the famous Black Hat event
in
> > Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.
> > Symantec is the Diamond sponsor.  Early-bird registration ends September
> 6.Visit us: www.blackhat.com
>
> --------------------------------------------------------------------------
> --
> >


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------