How to know if a file is a virus...
- Thread starter Sebouh
- Start date
OS Dragon
New Member
Well, its a complex question because there are many different type of virues: -
- Common Viruses
- Program Viruses
- Boot Viruses
- Stealth Viruses
- Polymorphic Viruses
- Multipartite Viruses
- Macro Viruses
- Windows Viruses
- Malicious Program
jancz3rt
<b>VIP Member</b>
Yeah indeed
It check for certain patterns and algorithms within files and when infected recognizes them. This is why new variants come up often as they fool the antivirus....unless it already has teh virus definition files...into believing that teh files are safe when they are in fact not. They also search for specific .exe files etc...and check for running processes or the memory. It's very hard to answer the question but i hope I have elaborated on teh bove post.
JAN
It check for certain patterns and algorithms within files and when infected recognizes them. This is why new variants come up often as they fool the antivirus....unless it already has teh virus definition files...into believing that teh files are safe when they are in fact not. They also search for specific .exe files etc...and check for running processes or the memory. It's very hard to answer the question but i hope I have elaborated on teh bove post.
JAN
Lorand
<b>VIP Member</b>
This task was so easy in the good old days: write a program that makes a database of all the executables (exe, bat, pif, dll, etc.) with their name and size (or CRC) when the system is clean, then periodically verify them -- an infected file could have different size and surely different CRC. If you add a boot-sector check too then you'll have a bulletproof antivirus for all the viruses that are older than a decade.
But today's viruses are much cleverly written and you could identify them only by they signature. So even if you manage to write an antivirus program, updating it's signature database would be a full-time job...
But today's viruses are much cleverly written and you could identify them only by they signature. So even if you manage to write an antivirus program, updating it's signature database would be a full-time job...
