Virus signature

Virus signatures are used by anti-virus programs to identify viruses . They are as unique a distinguishing feature as possible.

To create a virus signature, multiple copies of a virus are scanned for patterns and regularities that are specific to that virus. It is necessary to check several copies because viruses are often programmed in such a way that they can mutate , so to speak , without changing the actual code .

Since new viruses are constantly being programmed and brought into circulation, manufacturers of anti-virus software regularly make files with such virus signatures available for updating their software. Anyone who uses such software should also update these signature files regularly, as otherwise the software will not be able to detect new viruses or will only be able to detect them with difficulty using heuristic methods .

See also

• EICAR test file

Web link

Wiktionary: Virus signature  - explanations of meanings, word origins, synonyms, translations

Individual evidence

1. ↑ Alain Zidouemba: Write ClamAV signatures. (PDF; 625 kB) May 4, 2009, p. 18ff , accessed on October 16, 2009 (English).