Antivirus question I dont knwo the answer to

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by mritter2007, Dec 7, 2009.

  1. mritter2007

    mritter2007 Private E-2

    modern anti-virus programs use cryptographic hash
    functions to detect virus infection. Namely, an anti-virus program first applies a hash
    function to compute a checksum of each file, and store the checksums in a secret place.
    When scanning for viruses, for each file the anti-virus program computes its checksum
    again, and compares this checksum with that of the file that has been computed and
    stored.

    a. What property of the hash function is needed in order for this approach to work?
    b. How can a virus program avoid such detection?
     
  2. evilfantasy

    evilfantasy Malware Fighter

    Are you asking about protection or how to create a program that can't be detected? Is this homework?

    Either way this we do malware removal in this forum. You might have better luck asking this in the Programming forum.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds