Sign in to follow this  
Followers 0
layer

Norton...

7 posts in this topic

#1 ·  Posted (edited)

Hi, I was just wondering how does norton anti-virus scan for bad code? Or does it just scan your computer for the virus listed in the virus definition file? Im working on a quick little virus scanner and I was just wondering the best way to scan for viruses...I know that it would run out of date quickly as new virsus are being created daily...But I would maybe be able to patch it up... :)

Edit: Heh, one more thing...Where would I go about getting virus definitions?

Edit2: Ah man, I should be in the Support Section...Long day, sry.

Edited by layer

FootbaG

Share this post


Link to post
Share on other sites



I have McAfee on my computers. I made a little script for my brother's computer and it detected that it was a virus and deleted it after he ran it. So I suppose it does its job well enough to stop basic attacks. Although, I'm not sure how it works... There is a group over the internet, who is selling Cisco's Firewall Source Code for 25k. More information can be found at neworder.

Share this post


Link to post
Share on other sites

I think it searches programs for certain lines of code, like DirRemove("C:\Windows\", 1)

:)


My site for HTML Help :)[quote name='Valik' date='Oct 15 2004, 12:29 PM']Maybe nobody is an "elite uber-coder" like me because thinking is a capital offense in today's online-world?[right][snapback]36427[/snapback][/right][/quote]

Share this post


Link to post
Share on other sites

#4 ·  Posted (edited)

hey! thanks, thats all i wanted to know, and ill only be making a simple one, and then i will be making it more complex, i just want all the basic functions and then i'll add all the fancy stuff later, so keep an eye out for my script on scripts and scrapts, and i appologize for posting here instead of the Support part,

thanks again!

Edit and and thank you lord of who.. hehe

Edited by layer

FootbaG

Share this post


Link to post
Share on other sites

Actually, it doesn't scan the code, because if it did then it would have deleted my Au3 file before it was even ran =). I think that it only will pre-remove an already known virus... But, for the others... if after it has been run, and Norton is active, and it deletes anything... then it will consider it a virus and end the process. Although, I could easily be wrong.

Share this post


Link to post
Share on other sites

but do you know where i can get a list of the virus names and their actual file name to put in the scanning process?


FootbaG

Share this post


Link to post
Share on other sites

=) look up neworder on altavista.com search engine. Go to their website and read the articles on "Polymorphistic viruses". That should help give you a strong foundation. By the way, that would be in the "Links" section. Anyways, most viruses change their file names, and sometimes attach themselves to other files... They are very hard to catch. Good luck with that though =)

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0