virus signatures

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Nish Nishant · Answer 1 · 2010-10-28T13:26:00

Solution 1

I don't think there's a free public database available. There were attempts to start a free and open source virus signature DB but they all got abandoned. It's a very expensive task to keep it updated since new viruses and trojans are detected on a daily basis (sometimes multiple times daily).

Posted 28-Oct-10 13:26pm

Nish Nishant

Updated 28-Oct-10 13:27pm

v2

Comments

ashborg 28-Oct-10 19:29pm

and for recognizing DOS Attacks on a network?

Nish Nishant 28-Oct-10 19:31pm

Well that's different from signatures. Most DOS attacks are detected by monitoring for unusual port connection activity on your public IP addresses.

Some use buffer overflows to root a system or to DOS it. Again, while there are tons of sites that post new vulnerabilities and shell-code on a daily basis, there is no single point public source that's comprehensive and updated regularly.

LloydA111 · Answer 2 · 2010-10-28T13:27:00

Solution 2

By decompiling/disassembling viruses.

Posted 28-Oct-10 13:27pm

LloydA111

Comments

ashborg 28-Oct-10 19:29pm

how do i do that?

LloydA111 28-Oct-10 19:33pm

That is like asking how to build a space rocket. It's very complicated and the sort of people that do it regulary tend to not divulge too much information (Anti-virus companies definitely don't tell people). Have a look around on the internet for it, it comes up with some seriously in-depth ideas and code.