Generally, new virus signatures are created and distributed by the makers of antivirus software. So if you're running Avast, for example, the Avast company releases new signatures in patches your software downloads and installs.