Reading strings in a .exe file for virus signatures

[skyfe]

Hi,

Was wondering how can I search for virus signatures, read strings, from a .exe file? Does anyone know how to?
(How to read a .exe file for strings, to search for virus signatures)
Thanks in advanced,

Skyfe.

 

[coldfire417]

Re: Reading strings in a .exe

Theres really no way to read the actual strings, but I think you should read the 'Bytes' You first get a list of malicious file NAMES and then have it scan for those. If it detects one, then it reads the bytes, (How many chars are in it) If it matches the description, it's a virus, if not, then its clean.

eg. patch.exe <---(Netbut) 3123949 <----(Bytes)

Have it scan for patch.exe, if it matches 3123949 bytes, then its a virus.

Btw, method to read bytes is:

Dim infoReader As System.IO.FileInfo
infoReader = My.Computer.FileSystem.GetFileInfo("Path Of Virus")


Result Textbox.Text = infoReader.Length