Answer the question
In order to leave comments, you need to log in
Do antivirus companies share signatures among themselves?
I am writing a program in Delphi. 2007. Kaspersky swears at a certain line in the code. After changing this line in the code, the antivirus stops cursing. I decided to send the exe file of the program, which is not detected by Kaspersky, to the laboratory with the mark - suspicious software.
So what do you think? New signatures from Kaspersky have arrived. And exe that was not detected by the virus. Suddenly became a virus. As I understand it, they take the md5 hash of the file in Kaspersky and stupidly hammer it into signatures?
Changed again the code in the program. Kaspersky again does not find viruses. A question. Does Casper send his "brave signatures" to other antivirus companies? This exe file is not detected in other antiviruses.
Answer the question
In order to leave comments, you need to log in
Signatures are not shared. There are false positives. And life is pain and everything is decay.
Signatures are not shared. Share copies. The process of obtaining signatures from instances is the know-how of every antivirus company.
The other day there was a scandal that LK allegedly shared something under the guise of malware that broke the work of competitors.
In fact, a virus database is the biggest secret of any antivirus manufacturer - why give it to competitors for free?
And what does your program do that should be detected by antivirus?
After all, anti-virus companies do not add all the files that the user sent them to the databases.
Signatures are not specific pieces of code, but certain semantics. So one signature can detect several viruses written in different languages.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question