I've written some custom rules for Mcafee virusscan enterprise and want to test them against random malware.
I could browse urlvoid, malwr, urlquery looking for active URLs, but what I'd prefer is a list of sites that have been known to use browser exploits and most people would visit- for example sites that serve yahoo ads, sports news sites, etc..., and launch them allwith a script:
Text
start /wait iexplore.exe http://www.example.comsleep 600taskkill /im iexplore.exestart /wait iexplore.exe http://anothersite.com
It's on a segregated vlan that uses a different ip range that normal wan traffic does not use. Also I've disabled file/printer sharing (although some new malware in the future will certainly be smart enough to enable them).