Writting Antivirus program in VC++

[Ilamparithi]

Hi All, How to write a antivirus program in vc++.. Regards, A.Ilamparithi

[Anonymous]

First find some virus, study how they function, and how they infect the system, Then figure out how to reverse its action, And there you have an antivirus.

[Ian Darling]

Ilamparithi wrote: How to write a antivirus program in vc++.. Wow - that's a tall order. I would suggest that you actually need to actually design and write one, and then ask for help on more specific issues. But for starters, I would guess you need to find out how to: * Hook the filesystem (so you know when files are being changed) * Storage and update mechanisms for virus signatures * Heuristics to detect new viruses * Efficiently scan the changes to see if they match known virus signatures * Isolate infected files and/or revert the changes being made (for isolation, you probably want a storage environment where files cannot be directly accessed or executed, like an encrypted virtual file system?) * Internally validate your code to ensures it isn't infected by malicious code or otherwise affected by somethign trying to undermine it (man-in-the-middle attacks, shutting down components, outright replacing them, etc) That's a big job, so I wish you good luck. -- Ian Darling "The moral of the story is that with a contrived example, you can prove anything." - Joel Spolsky

[BaldwinMartin]

OK look at one I wrote and see if this would help you. If so I can post the source. http://www.digitaltcp.com Please remember I just check for one virus at a time at this point. To do it properly you are going to have to do some array work. Also may have a leak or two. Wrote it in one night for a buddy the got WelchWorm. Used a great deal of code off this site. Best Wishes, ez_way