[comp.virus] Standardized virus signatures

JPINSON@uga.cc.uga.edu (Jim Pinson) (02/23/91)

I have been evaluating several of the virus-scan programs and have
noticed that several of them use (or can use) an external text file
containing virus "signatures".  This seems a very useful feature since
signatures can be posted on lists such as this.  There does not seem
to be a standard format for these files.  Is there any reason a
standard format could not be developed?  It would simplify the virus
posting process.

Jim Pinson   University of Georgia

eldar@lomi.spb.su (Eldar A. Musaev) (03/21/91)

The scanners have an unpleasant feature. If someone changes the
signature of the virus, it (virus) becames unfamiliar to scanner. So
the publication of signatures leads to the new versions with new
signatures etc.  Though it is a good question what is better, this
emergency or the self-restrictions in communications ...

Eldar A. Musaev			lomi.spb.su!eldar@fuug.fi
researcher, Ph.D., Mathem.Inst., Acad. of Sci., Leningrad