I have thought of creating simple anti-virus. I have read some article and they said that the there is a two way of detection.
The virus dictionary signature searching is the one method. So I have chosen this method for the simple implementation.
From this, I have understood that we have to search the virus signature with the file.
What is the difference between file signature and virus signature?
If I have saved a virus file where the virus signature will be stored in the file.
How to match the virus signature pattern with the file signature?
If there is any sample code to explain, would be better for me to understand.
Some virus signatures links. How to write code for this signatures? http://www.nlnetlabs.nl/downloads/antivirus/antivirus/virussignatures.strings