Page 2 of 3
Posted: Thu Jun 08, 2006 12:20 pm
by Nik
Well 2 things:
1. I hopw you are running the Virus Test system in a VM or an Emulator
2. If you find code wich is much faster in C you could provide it to Fred, maybe he can fix some of the speed issues then^^
Re: I need Viruses !
Posted: Thu Jun 08, 2006 12:21 pm
by Polo
=> Do you have some collections or some viruses?
You can freely download Windows Vista beta2 :
http://www.microsoft.com/windowsvista/g ... eview.mspx
Posted: Thu Jun 08, 2006 12:28 pm
by Inf0Byt3
I've got 5 packs of viruses downloaded from the web and P2P. It was all I found, but I bet many of them are just duplicates... I am going to use a virus collection tool to sort them out and keep the database clean.
Oh, and I wanted to ask you guys something: What's better to use? Hashes or data from file? Hashes could be faster, but it does not work for infectors which append data.
@Nik:
I don't think I am man enough to test them myself. I think I'll pass them to my friends

. Just joking.
About the speed, I'll make some demos if I can. The difference is that in C I can load a file in a string buffer directly and I use memicmp to search through the buffer.
Posted: Thu Jun 08, 2006 12:49 pm
by DarkDragon
Psychophanta wrote:Maybe you could make a full PC protect software, so it's secure of hammers, cars, psychos, ... .
You will never get free of psychos
Are you sure?
http://textlab.net/hermannderuser/pages/page_1.html
[EDIT]
Why the fuck doesn't my quote work anymore?
Posted: Thu Jun 08, 2006 2:03 pm
by Trond
About the speed, I'll make some demos if I can. The difference is that in C I can load a file in a string buffer directly and I use memicmp to search through the buffer.
You don't have to use a string buffer if you use memorycompare. And you shouldn't put a file in a string since the file could contain a null character and then everything will be messed up.
ReadData() is also a lot faster.
Posted: Thu Jun 08, 2006 2:23 pm
by Trond
Re: I need Viruses !
Posted: Thu Jun 08, 2006 2:41 pm
by Dare
Posted: Thu Jun 08, 2006 6:25 pm
by Inf0Byt3
Thanks Trond. I sorted the database and unfortunately there were many many duplicates inside. The real number of virs is somewhere about 6000

. But that's a start too.
About the statement, the one that c is faster, I totally changed my mind. In a very long loop, I found out that PB is faster

.
Posted: Thu Jun 08, 2006 6:46 pm
by Polo
It's because, I think, that a C compiler, to optimize the speed, will write the code 30 times if you want to do a 30 time loop.
Er, I think

Posted: Thu Jun 08, 2006 6:53 pm
by Inf0Byt3
Yes, that could be possible. That explains the "Sacrifice size for speed" option in older compilers

.
Posted: Thu Jun 08, 2006 6:53 pm
by Nik
Well a good c compiler like gcc wil just optimize the code taht means he can inlien if it helps or he doesn't if it wouldn't help, he probably also does alter the code with !NOPs to fite better into the cache, it depends heavily on the compiler gcc 4.1 for example can even vectorize the code automatically
Posted: Thu Jun 08, 2006 7:10 pm
by Inf0Byt3
That's cool

. But I prefer PureBasic over C. I guess I am one of those guys with big ideas but bad practice so I need highlevel stuff to accomplish something...
Re: I need Viruses !
Posted: Thu Jun 08, 2006 9:37 pm
by techjunkie
Inf0Byt3 wrote:I'm making progresses with PureAV (in my free time) and I downloaded all the viruses I found on the net

. But that ain't enough for me. Do you have some collections or some viruses? If so, PM me please

. I currently have ~50.000 virii ready to be detected.
Can't you download a "Virus Generator", "Virus Toolkit", "Virus Creator" or another obscure software? They are all around the net.
Hmmmm... but even if you keep the virus local and destroy it fast - I'll guess it can be a criminal act? or?

Posted: Thu Jun 08, 2006 9:41 pm
by Inf0Byt3
What about all that software firms that create antiviruses? They should have problems too

... Anyway, I don't keep them. I am generating signatures and then delete them immediately. So what should I do? Should I destroy them all now and forget about this project? I don't want to have problems :roll: .
Posted: Thu Jun 08, 2006 9:45 pm
by thefool
NO!
Having viruses on your computer is NOT any legal threat!
I think he talked about using virus generators. And i would again say that its not legally wrong as long as you don't spread them.