Virus Database

[Vhyr]

Hi all,

I'm trying to make a AntiVirus just for myself. I know that this takes a long time and that it's very difficult. But I still want to try it, I will learn a lot of it.

So far it's going good. But now I have to setup a Database with the Virus Signatures. I'm now using a MySQL Database. My question is : How can I add the Virus Sigatures to my database?

I hope you guys can help me

Thanks,

Vhyr.

[Pradeep1210]

I'd recommend you use simple things like flat file etc. instead of database files etc. which depend on external/complex programs for its operation. What will you do if the virus corrupts your database or database program, drivers etc.? With flat files you could just keep a backup copy somewhere and restore from there if you detect that the file is corrupt.

[Vhyr]

Thanks for your reply.
Could you please give me a link to a tutorial or something?
I have never heard of Flat "Files" so this is maybe a noob question but, can I auto update the "Flat" files?

[Pradeep1210]

Flat files means simple text files. You can use simple file input/output operations to get or put data into it.
Have a look at the System.IO namespace. It has all that is required to deal with files.

[Vhyr]

Flat files means simple text files. You can use simple file input/output operations to get or put data into it.
Have a look at the System.IO namespace. It has all that is required to deal with files.

Thanks mate!
I will have a look at it.

[Pradeep1210]

Have a look at this article that describes an algorithm on how to extract virus signatures automatically.
http://www.research.ibm.com/antiviru...VB94/vb94.html

[Vhyr]

Is this file a flat file with Virus Signatures? (It's a .txt file)

Java/TrojanDownloader.Agent.NBE (2)
JS/Exploit.Pdfka.CIP (10)
JS/Exploit.Pdfka.CJQ
JS/Exploit.Pdfka.OAO (2)
JS/Exploit.Pdfka.OAP
JS/StartPage.NAD (2)
VBS/TrojanClicker.Agent.NAL (14)
Win32/Adware.DoubleD.AJ (2)
Win32/Adware.PCProtector.C (2)
Win32/Agent.ODI
Win32/Agent.OEZ (2)
Win32/Agent.RBL
Win32/AutoRun.Agent.TS
Win32/AutoRun.Spy.VB.C
Win32/AutoRun.VB.PU (4)
Win32/AutoRun.VB.PV
Win32/Bamital.CI
Win32/Bamital.CJ
Win32/BHO.NZJ (5)
Win32/Bifrose.NEL (2)
Win32/Bifrose.NTA
Win32/Chksyn.AE (2)
Win32/Delf.PJN (2)
Win32/Delf.PJO (2)
Win32/Injector.BXG
Win32/Injector.BXH
Win32/Injector.BXI
Win32/Koutodoor.EP
Win32/Koutodoor.GG (2)
Win32/Koutodoor.GI
Win32/Kryptik.ETO

Do I need to put the Flat Files into a Database?

[Pradeep1210]

1. This is just a list of viruses, not virus signatures.
2. I think you have got confused with the term "flat file". It is just another raw data file. You can use the classes in System.IO namespace to read and write data to & from the files. You should define your own storage format, so that you can read it back easily.
3. No you don't need to put any files in database. Instead you need to create you data in the flat file.