Click here to Skip to main content
15,888,610 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
See more:
Hello... I am unaware of what types of signature to use when scanning for viruses. I have had a comment about digital signatures and handwritten ones but have no idea what each one is or if it will help my situation. I have made a half decient antivirus scanner but need it to also scan for signatures. any help in this reguard would be more than appriciated

thanks in advance.......
Posted
Updated 26-Nov-10 18:44pm
v3
Comments
Henry Minute 25-Nov-10 17:36pm    
Please amend your question to make it clear whether you mean a digital signature or a handwritten one. Judging by the fact that you want to scan it I would guess at handwritten, but it would be a guess.
Dale 2012 27-Nov-10 0:37am    
I honestly need help with all of the above. I have made a half decient antivirus scanner and need to know what signature a virus has and how to use that signature to scan for it if it exists on the users computer. I have no knowledge of signatures and need to know how to approch this topic. what is a handwritten and digital signature? can I implament any of the two into a virus scanner?
Indivara 29-Nov-10 9:54am    
Forget the handwritten part. Your original question was too vague, it looked like you wanted to scan what someone signed manually (like a cheque)
Indivara 29-Nov-10 9:58am    
Have you read up on the subject? Googling "virus signature" gets several hits. This for example:
http://antivirus.about.com/od/whatisavirus/a/virussignature.htm

1 solution

Dale,

I had a feeling that you were out of your depth with your last questions (the ones i assisted you with), and this question has now confirmed that you haven't got a clue what you were doing when it comes to virus identification and scanning.

The subject is a very complex one and if you really should have investigated the subject matter fully before diving in and writing code.

I am sure there are many experienced programmers on this site, that wouldn't even entertain the idea of writing virus scanning software.

You should do a Google search for "White Paper" and "Virus Scanning" or "Virus Identification", and you will find some interesting papers on the subject.

Here is one that shows you that there is more to it than you already think; http://www.crswann.com/2-NetSecurity/VirusDetectionTechnology(McAfee).pdf[^]


Anyway, back to your original question;
A virus signature is simply a collection or sequence of bytes that are found in a file that are tell tales of the particular virus. e.g. See this page which details a standard test file which every virus scanner should detect. http://www.eicar.org/anti_virus_test_file.htm[^]

Virus companies spend years building up databases of signatures, and are actively scanning the internet and receiving files suspect of containing new virus so they can incorporate the signatures into there products.

As you will see reading the links i have attached, there is more to it than simply what you have been programming to date.

If you want my honest opinion, i would say STOP now, and find something to code which you fully understand and are more likely to make money on.
 
Share this answer
 
v2

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900