Original Post
🔒 Locked
Antivirus programming
Advertisement
If you need to actually write something, don't. This is the sort of thing that is hard to do right, and next to useless if you don't do it well. Get an established product.
That said, if you're aiming to learn: a site like SecurityFocus will likely have better resources than a gamedev site.
That said, if you're aiming to learn: a site like SecurityFocus will likely have better resources than a gamedev site.
Here are a few background books. Check for updated versions.
"Inside Windows 2000" by David A. Solomon and Mark E. Russinovich
"Undocumented Windows 2000 Secrets" by Sven B. Schreiber
"Windows NT/2000 Native API Reference" by Gary Nebbett
"Debugging Applications" by John Robbins
You'll probably need a background in assembly language too. And copies of CPU manuals from Intel.
Here is a classic white paper on the subject (pdf).
Memory Scanning Under Windows NT by Peter Szor
Read this first and if it appeals to you, then read more! [grin]
Here are a couple of books more specific to the subject.
"The Art of Computer Virus Research and Defense" by Peter Szor
Here is Szor's site: peterszor.com
"Rootkits: Subverting the Windows Kernel" by Greg Hoglund, James Butler
Here is a Hoglund's site: rootkit.com
And then there's phrack.org
"Inside Windows 2000" by David A. Solomon and Mark E. Russinovich
"Undocumented Windows 2000 Secrets" by Sven B. Schreiber
"Windows NT/2000 Native API Reference" by Gary Nebbett
"Debugging Applications" by John Robbins
You'll probably need a background in assembly language too. And copies of CPU manuals from Intel.
Here is a classic white paper on the subject (pdf).
Memory Scanning Under Windows NT by Peter Szor
Read this first and if it appeals to you, then read more! [grin]
Here are a couple of books more specific to the subject.
"The Art of Computer Virus Research and Defense" by Peter Szor
Here is Szor's site: peterszor.com
"Rootkits: Subverting the Windows Kernel" by Greg Hoglund, James Butler
Here is a Hoglund's site: rootkit.com
And then there's phrack.org
Topic Locked
This topic has been locked by a moderator. New replies are not allowed.
Sign in to reply to this topic.
Advertisement