Re: Extracting signature snippets from AV databases

Jose Nazario <[email protected]> Mon, 8 May 2006 17:42:26 -0400 (EDT)

Newsgroups	gmane.comp.security.virus
Message-ID	<[email protected]>

On Mon, 8 May 2006, Bill Stout wrote:

> Has this been done already?  Are specific signatures a 'secret sauce'?

EICAR.	http://www.eicar.org/anti_virus_test_file.htm
SPYCAR. http://www.spycar.org/Welcome%20to%20Spycar.html

hope that helps.

________
jose nazario, ph.d.		    [email protected]
http://monkey.org/~jose/ 	    http://monkey.org/~jose/secnews.html
				    http://www.wormblog.com/