antivirus

Decompiling EXE to ASM

由 泪湿孤枕 提交于 2019-11-30 05:44:50
问题 I want to make a basic antivirus for my free time. Basically I learned about the basic structure of the EXE(windows) file. How do I extract the ASM code from the file and the PE header? 回答1: You can install Cygwin and use objdump to decompile an exe into asm. Be sure you select the binutils when installing cygwin. After installing cygwin, you can run the following from a bash shell: objdump -Slx yourpgm.exe 回答2: You can use some free distrubuted disassembler.for example: ollydbg diassembler.

Missing directive or assembly reference using WMI ManagementObjectSearcher?

由 ぐ巨炮叔叔 提交于 2019-11-30 04:07:29
问题 I have found this link: Detect Antivirus on Windows using C# However when I try this code in visual c# express edition 2008 it says : Error 1 The type or namespace name 'ManagementObjectSearcher' could not be found (are you missing a using directive or an assembly reference?) C:\Users\Andy\Documents\Visual Studio 2008\Projects\ConsoleApplication1\ConsoleApplication1\Program.cs 15 17 ConsoleApplication1 Amongst other similar errors on the 2 lines which seem important! Looks like the code

ensuring uploaded files are safe

由 霸气de小男生 提交于 2019-11-30 03:52:47
问题 My boss has come to me and asked how to enure a file uploaded through web page is safe. He wants people to be able to upload pdfs and tiff images (and the like) and his real concern is someone embedding a virus in a pdf that is then viewed/altered (and the virus executed). I just read something on a procedure that could be used to destroy stenographic information emebedded in images by altering least sifnificant bits. Could a similar process be used to enusre that a virus isn't implanted?

Replacing java class?

由 我是研究僧i 提交于 2019-11-29 17:39:54
I'm working on a sandbox feature for my java antivirus, and I've come into a question: Does the specified package on a class matter for compilation? Example: I'm running a program that wants to use Runtime.getRuntime().exec() , when the classloader attempts to load that to run a method, does it check the package qualified in the file, if they exist? I would prefer not to try and change files in the JVM, but to simply load ones from a different package. I can accomplish the loading and such, but my only dilemma, will it crash and burn? Inside the java, it would be registered as say, java.lang

python executables alarms antivirus

由 假如想象 提交于 2019-11-29 17:02:35
I made a simple GUI (wxpython) application (some static text, buttons, comboboxes etc) and made exe file with pyinstaller, but the Avast antivirus says it's a virus. How can I fix this? Send your EXE file to Avast for analysis: Report a Virus If you’ve encountered a suspicious file or received what you think is a false-positive virus alert , please contact our Virus Lab for an analysis. There is also a bug report for PyInstaller about this. The bug was supposedly fixed 13 months ago. Perhaps you should reopen it. 来源： https://stackoverflow.com/questions/22693665/python-executables-alarms

Visual Studio and Virus Scan of Temp folder

由 a 夏天 提交于 2019-11-29 07:42:36
问题 We are using Visual Studio 2008 as our primary development IDE. Our security team has set up McAfee to scan files in our \Local Settings\Temp folder. Unfortunately VS uses this directory during code builds which is slowing the developers down. We've reached an impasse with the security team on this, and wonder if anyone knows of a configuration setting in VS where we could change the folder to where those temporary files are written. Thanks 回答1: You can write a batch file which overwrites the

How to detect antivirus on Windows Server 2008 in C#?

由 只谈情不闲聊 提交于 2019-11-29 06:14:58
问题 I have seen code samples similar to the following numerous times in my search for an answer: using System; using System.Text; using System.Management; namespace ConsoleApplication1 { class Program { public static bool AntivirusInstalled() { string wmipathstr = @"\\" + Environment.MachineName + @"\root\SecurityCenter"; try { ManagementObjectSearcher searcher = new ManagementObjectSearcher(wmipathstr, "SELECT * FROM AntivirusProduct"); ManagementObjectCollection instances = searcher.Get();

Replacing java class?

由 不羁岁月 提交于 2019-11-28 11:39:51
问题 I'm working on a sandbox feature for my java antivirus, and I've come into a question: Does the specified package on a class matter for compilation? Example: I'm running a program that wants to use Runtime.getRuntime().exec() , when the classloader attempts to load that to run a method, does it check the package qualified in the file, if they exist? I would prefer not to try and change files in the JVM, but to simply load ones from a different package. I can accomplish the loading and such,

What are my options to check for viruses on a PHP upload?

由 时光怂恿深爱的人放手 提交于 2019-11-28 08:19:53
I am looking to see how I can go about checking if an uploaded file has a virus or not via PHP. What options exist, pros and cons of each, etc. ClamAV is a free anti virus commonly used on server applications. php-clamav is an extension for binding ClamAV to PHP. You can check their documentation . I've found a tutorial on how to use clamav as a Zend Framework Validator which already includes instructions on how to verify upload files. The tutorial should also help you on using it on another frameworks or architectures. You can also call clamav by its command line interface with clamscan .

Get notification when a new drive is connected via USB or other means (C#)

由 不打扰是莪最后的温柔 提交于 2019-11-28 07:34:31
问题 I need to detect when a new drive is plugged into a Windows system through a USB port, firewire port, etc. I am aware of the WM_DEVICECHANGE message, but this requires a window to be open in order to use it. Is there a way to create a background process in C# that detects when new drives are plugged in? Background info: I am wanting to write this app to remove a worm from company removable drives. Regular antivirus software is failing to removing it. We have a script that will remove the worm
订阅 antivirus