DIYALA JOURNAL OF ENGINEERING SCIENCES

Abstract

This project is proposed a system that will detect and stop both known and unknown viruses and the detection of these viruses will be based on the viruses' behavior. This is done by analyzing the email (main body & attachments) for any suspicious code (malicious commands or statements) that could be a virus and take a specific action according to the result of the previous step.
The proposed system consists of two basic stages: first the detection stage and then the cleaning (repairing) stage. The proposed system which is called the "Email Viruses Detection Disinfection System" (EDDS) will check every incoming email (main body & attachments), so that the detection stage will be considered into two steps: checking the main body of the email message for any malicious commands that could be a virus and checking the attachments of the email message for any suspicious codes or actions that could be a virus. Checking the attachments will depend on the attachment's extensions. The executable files that (EDDS) will process are (*.exe, *.com, *.vbs, *.pif, *.reg, *.bat, *.html, *.htm).