Stack Overflow
Stack Overflow

Questions tagged [virus-definitions]

8 questions
3
votes
2 answers

Windows Defender detecting Python EXE as Trojan

I made a Python script that mails a Windows directory as zip to me. I added a scheduler using sched module that repeats this every hour. I was attempting to make a simple sync application for personal use that starts at Windows Startup. I converted…
Abhinay Pandey
  • 46
  • 3
  • 15
2
votes
1 answer

Hexadecimal virus signatures database

Over the past couple of weeks, I was in the process of developing a simple virus scanner. It works great but my question is does anybody know where I can get a database (a single file) that contains 8000 or more virus signatures WITH their names,…
Seif Shawkat
  • 237
  • 2
  • 15
2
votes
3 answers

What are good sources for virus signature data?

Is there any website which provides antivirus definition database to help make new antivirus software?
Krish
  • 137
  • 1
  • 3
  • 12
1
vote
2 answers

Virus Signatures and Genetic Algorithms

I would like to know how one achieves the following signature. I have read online that (al least in the past) researchers will take the "suspected" file the binary code, convert it to assembly, examine it, pick sections of code that appear to be…
Carlos
  • 5,405
  • 21
  • 68
  • 114
1
vote
1 answer

Query antivirus definitions date?

Is it possible at all to query (WMI?) the virus defnintions date of definitions installed on remote computers? I'd like to start specificially with Symantec Endpoint Protection, and then branch out to other antivirus products. This is a WinForms,…
Matt Hanson
  • 3,458
  • 7
  • 40
  • 61
1
vote
1 answer

Binary And Alternate Representation Transforming

In this publication about Metamorphic viruses i have found this classification: Metamorphic malware may be either a binary-transformer or an alternate-representation-transformer. The former class transforms the binary image that is executed, …
paolo2988
  • 857
  • 3
  • 15
  • 31
0
votes
3 answers

Virus database main.cvd uncompression

In my previous question (Hexadecimal virus signatures database), I asked where I can get a hex virus signature database, and the answer was: ClamAV. So I downloaded the "main.cvd" database and was told that it was a compressed tar file. I have two…
Seif Shawkat
  • 237
  • 2
  • 15
-2
votes
4 answers

VB.net MD5 checksums to Hex

I have a database of 700,000 MD5 virus signatures in the following format: 83968:961ed981485cea5ab3936496966ba0d6:Worm.Gaobot-318 86016:4bed8673ab3d695c52c233306ed3f733:Worm.Gaobot-319 Is there a way to convert the Md5 checksums to valid Hex…
Seif Shawkat
  • 237
  • 2
  • 15