Page 3 of 3

Posted: Thu Jun 08, 2006 9:51 pm
by Inf0Byt3
Oh..... I think I have some (i am not sure) but there should be some in there. But I am not creating viruses myself to detect them. I sorted them and I have an exact number of 6045 viruses. I will create an utility to make automatic databases. But still, should I use checksums for detection or hex data from files?

Posted: Thu Jun 08, 2006 10:26 pm
by Num3
Just go to a warez site and download all cracks you can find...

Your trojan / virus collection will increase pretty fast!

Posted: Thu Jun 08, 2006 10:30 pm
by Inf0Byt3
Hmm, not a bad idea! I might try this once :D. For now, it's enough...

Posted: Fri Jun 09, 2006 1:46 pm
by Trond
The WMF exploit I think:
http://85.255.117.53/pa/inp/img/OXdzd3V ... FBQUhQ.wmf
Edit: Definetely. :oops:

Posted: Fri Jun 09, 2006 2:59 pm
by Dare
:D

Posted: Fri Jun 09, 2006 3:15 pm
by Inf0Byt3
The link is broken! BTW, I made the pattern matching algorithm. I checks a 1024 bytes buffer for 25000 items in less than 1 ms :shock: .

Posted: Fri Jun 09, 2006 3:44 pm
by DarkDragon
Inf0Byt3 wrote:The link is broken! BTW, I made the pattern matching algorithm. I checks a 1MB buffer for 25000 items in less than 1 ms :shock: .
Can't be true.

Posted: Fri Jun 09, 2006 3:53 pm
by Inf0Byt3
Why not? It seems to be ok. I'll have it double checked until tomorrow and make a quick demo.

[Edit]
That's stupid :lol: ... I just said 1024 bytes = 1 MB :shock: . Sorry. So it searches a 1024 bytes buffer for 25000 items in less than 1 ms.

Posted: Fri Jun 09, 2006 4:07 pm
by Trond
Yes, broken link, that's weird. I'll see if I can find it again if you don't already have it.

Edit: Here it should be (I didn't test if the file was changed since last download, hehe). Also I renamed it to wmf.safe to avoid the preview triggering once you select it. http://www.yourfilehost.com/media.php?c ... t.wmf.safe

Posted: Fri Jun 09, 2006 4:34 pm
by Inf0Byt3
Got it! Thanks.