Database for an antivirus program

[akhileshbc]

Hi guys...:wave:

Could you guys give me an explanation on the working of an antivirus program ?
I would like to create an antivirus application using VB6. But before that, I want to gather some general information about it.
What will be the contents of the virus database.? And how does the program checks the files based on the virus definition in database ???
(Some examples on the virus definition will be much appreciated)

Regards,
- Akhilesh

[Nightwalker83]

Well I'm not really sure but some of the information need in the database would be virus name, date and definition.

Edit:

This (http://www.antivirusworld.com/articles/antivirus.php) might give you some help.

[coolcurrent4u]

you can use mysql database, as it can be protable. I think most antivirus programs use flexible database like this

[akhileshbc]

you can use mysql database, as it can be protable. I think most antivirus programs use flexible database like this
Thank you... :wave:
I will try to use that....

Well I'm not really sure but some of the information need in the database would be virus name, date and definition.

Edit:

This (http://www.antivirusworld.com/articles/antivirus.php) might give you some help.
Thanks.... :wave:

Quote(from the above website):
Virus dictionary approach
In the virus dictionary approach, when the anti-virus software examines a file, it refers to a dictionary of known viruses that have been identified by the author of the anti-virus software. If a piece of code in the file matches any virus identified in the dictionary, then the anti-virus software can then either delete the file, quarantine it so that the file is inaccessible to other programs and its virus is unable to spread, or attempt to repair the file by removing the virus itself from the file.
So, what will be that piece of code...??? :confused:

[coolcurrent4u]

Most antivirus look 4 "signatures" or "partterns" that match malicious code in programs, plus they might also lern how this viruses attached themselves to programs. You might need to study the win portable hearder structure. This will give you some tips

[akhileshbc]

Most antivirus look 4 "signatures" or "partterns" that match malicious code in programs, plus they might also lern how this viruses attached themselves to programs. You might need to study the win portable hearder structure. This will give you some tips
Do you have any links for that..??? Or, an example..??? :wave: