Virus Detection

[Aereshaa]

Originally Posted by elvenrunelord

Much like your parents leaving you on the PC without proper supervision.

How would you know whether he is a kid? For all you know, he could be a cat! And second, if he is a kid, then how would you know he isn't being supervised? Face it, you have absolutely no information, so maybe you shouldn't start making ad-hominem attacks of that nature.

[dargueta]

Getting back to viruses...what MeTh0Dz meant by signatures in a virus is the "engine". Viruses use "engines" to get in underneath the security system. (Basically what it does is sneak by the security software using various techniques and then calls the main() function of the virus.)

You can create different viruses using the same engine, and create the same virus using different engines. So when antivirus software scans a file, it checks its database of known hacking/tunneling engines and sees whether one of those is present in that file. If it is, then it flags it as infected and takes appropriate action.

Tunneling With DOS Interrupts

[shruti]

Making malware,good idea.Yes,virus problem is very boring.Sometime it disturb my whole system.

[MeTh0Dz|Reb0rn]

And this post means... ^^

[chili5]

Um I have no idea lol. It doesn't really make much sense to me. lol

Originally Posted by dargueta

You can create different viruses using the same engine, and create the same virus using different engines. So when antivirus software scans a file, it checks its database of known hacking/tunneling engines and sees whether one of those is present in that file. If it is, then it flags it as infected and takes appropriate action.

If that's how it works, then how come theirs so many anti-viruses that detect files incorrectly as viruses?

[MeTh0Dz|Reb0rn]

Because their can be parts of perfectly legit files that appear to be virus signatures.

[|pH|]

Wow, people and their grammar ==


And @ Meth0dz, beat me to it! Something I did know! =p

[MeTh0Dz|Reb0rn]

LOL OMG EPIC. I am definitely saving that on my desktop for future use. I've needed that on multiple occasions.

And I'm sure you know plenty of stuff.

[|pH|]

I do actually, just EXTREMELY lazy =/.

[TcM]

What do you mean by signatures and what makes a signature look like malware or not?