Norton...

[layer]

Hi, I was just wondering how does norton anti-virus scan for bad code? Or does it just scan your computer for the virus listed in the virus definition file? Im working on a quick little virus scanner and I was just wondering the best way to scan for viruses...I know that it would run out of date quickly as new virsus are being created daily...But I would maybe be able to patch it up...

Edit: Heh, one more thing...Where would I go about getting virus definitions?

Edit2: Ah man, I should be in the Support Section...Long day, sry.

Edited November 9, 2004 by layer

[Guest Py7|-|[]/\/]

I have McAfee on my computers. I made a little script for my brother's computer and it detected that it was a virus and deleted it after he ran it. So I suppose it does its job well enough to stop basic attacks. Although, I'm not sure how it works... There is a group over the internet, who is selling Cisco's Firewall Source Code for 25k. More information can be found at neworder.

[the_lord_mephy]

I think it searches programs for certain lines of code, like DirRemove("C:\Windows\", 1)

[layer]

hey! thanks, thats all i wanted to know, and ill only be making a simple one, and then i will be making it more complex, i just want all the basic functions and then i'll add all the fancy stuff later, so keep an eye out for my script on scripts and scrapts, and i appologize for posting here instead of the Support part,

thanks again!

Edit and and thank you lord of who.. hehe

Edited November 9, 2004 by layer

[Guest Py7|-|[]/\/]

Actually, it doesn't scan the code, because if it did then it would have deleted my Au3 file before it was even ran =). I think that it only will pre-remove an already known virus... But, for the others... if after it has been run, and Norton is active, and it deletes anything... then it will consider it a virus and end the process. Although, I could easily be wrong.

[layer]

but do you know where i can get a list of the virus names and their actual file name to put in the scanning process?

[Guest Py7|-|[]/\/]

=) look up neworder on altavista.com search engine. Go to their website and read the articles on "Polymorphistic viruses". That should help give you a strong foundation. By the way, that would be in the "Links" section. Anyways, most viruses change their file names, and sometimes attach themselves to other files... They are very hard to catch. Good luck with that though =)