DNiD 2 (modified by mammon)

[an0rma1]

@noob thanks for updating!!

(sorry for the offtopic)
@mrexodia, Yara is great!, it reminds in some way to SQL, very easy syntax, simple, but huuuuuge powerful
When i read it months ago i wonder why anyone has come with something like that in all these years of virus/malware/etc research

Talking about multistring wildcard searching, i guess this is how antivirus always worked? years ago read the clam antivirus source, but i can't remind right now.
I know they also search for hashes, and obviously, the inner workings are much much more complex, but never read too much about it

And old kaspersky source was leaked years ago...

[alephz]

Originally Posted by an0rma1

read the clam antivirus source, but i can't remind right now.

I think, initially it was based on Kumar & Spaflord article "A Generic Virus Scanner in C++".