DaniWeb IT Discussion Community

DaniWeb IT Discussion Community (http://www.daniweb.com/forums/index.php)
-   Assembly (http://www.daniweb.com/forums/forum125.html)
-   -   plsss help....in antivirus programming (http://www.daniweb.com/forums/thread26366.html)

hudasntpay Jun 22nd, 2005 12:02 pm
plsss help....in antivirus programming
 
hi...can anyone give advice, tips, on how will i come up in developing the antivirus software coz i dont have any idea. im kinda new with assembly language and i haven't tried using the it. i have a hard time learning it.

please give me some guide, advice or tips on how the scanning for viruses works in the program.
i would appreciate any help.
thanks a lot.

mmiikkee12 Aug 20th, 2005 5:47 pm
Re: plsss help....in antivirus programming
 
You don't necessarily have to use assembly (you can if you want to, but good luck learning it). If you know C or C++ it should be good enough. Java probably won't work because you can't directly access the memory, meaning you can't scan for viruses that are already running in memory, making your antivirus app a piece of ****(no offense). (There may be other languages that can directly access memory, but I'm not sure.)

Anyway, whatever language you choose, you'll basically need to have a virus pattern file, which would tell the app that Sasser is a virus and explorer.exe (hopefully) isn't. :) You'll then need a scanner that looks at the memory to see if there are any viruses running, a boot sector scanner to look for boot viruses, and a file scanner to look for infected programs/system files/Word documents (still haven't figured out how you get a virus through a Word document, but apparently some people have managed to, so...), etc. Another good feature to have would be something like Norton's AutoProtect, which runs in the background watching for new viruses. Like I said, you'll need to use a language that can access resources directly.

Evenbit Aug 20th, 2005 8:14 pm
Re: plsss help....in antivirus programming
 
While you are at it, you might as well spray some bullets toward the other types of malware (spyware, trojans, etc.) since this would be an easy feature to add:

startup files
http://www.lafn.org/webconnect/mento...p/PENINDEX.HTM

trojans
http://www.megasecurity.org/files_all.html


All times are GMT -4. The time now is 2:29 pm.

Forum system based on vBulletin Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
©2003 - 2009 DaniWeb® LLC