H
H
Hitmanp2015-10-28 04:33:11
Malware
Hitmanp, 2015-10-28 04:33:11

Do antivirus companies share signatures among themselves?

I am writing a program in Delphi. 2007. Kaspersky swears at a certain line in the code. After changing this line in the code, the antivirus stops cursing. I decided to send the exe file of the program, which is not detected by Kaspersky, to the laboratory with the mark - suspicious software.
So what do you think? New signatures from Kaspersky have arrived. And exe that was not detected by the virus. Suddenly became a virus. As I understand it, they take the md5 hash of the file in Kaspersky and stupidly hammer it into signatures?
Changed again the code in the program. Kaspersky again does not find viruses. A question. Does Casper send his "brave signatures" to other antivirus companies? This exe file is not detected in other antiviruses.

Answer the question

In order to leave comments, you need to log in

5 answer(s)
V
Vladimir Martyanov, 2015-10-28
@vilgeforce

Signatures are not shared. There are false positives. And life is pain and everything is decay.

I
Ilya T., 2015-10-28
@Insaned

Signatures are not shared. Share copies. The process of obtaining signatures from instances is the know-how of every antivirus company.
The other day there was a scandal that LK allegedly shared something under the guise of malware that broke the work of competitors.

M
mace-ftl, 2015-10-28
@mace-ftl

In fact, a virus database is the biggest secret of any antivirus manufacturer - why give it to competitors for free?

M
Maxim Moseychuk, 2015-10-28
@fshp

And what does your program do that should be detected by antivirus?
After all, anti-virus companies do not add all the files that the user sent them to the databases.
Signatures are not specific pieces of code, but certain semantics. So one signature can detect several viruses written in different languages.

V
Vasily, 2015-11-02
@nvv

they exchange exactly files that they consider malicious (with some delay)
another example is services for checking files on-line with several antiviruses, from which files get to interested companies

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question