--
AlexMounier - 10 Dec 2006
Hello,
I think that
ClamAV Should also base virus detection on MD5 Hashes as the detection and addition to new malware is rather simple, however it should not only rely on this method for detection, I believe this should be just a little something extra. The Advantages of using this MD5 Based detection is that it has a almost 100% detection accuracy, its fairly easy to implement and provides a faster detection of viruses while keeping the old one
Pseudo code:
Load MD5 List
Get file being scanned's MD5 hash
Search for the MD5 Hash of the file being scanned in the MD5 List.
Perform the current binary search which is what
ClamAV is relying on righ now.
If you have any questions please email me at mnweb1 (at) gmail (dot) net
Alex
P.S: If you want I have a decent size collection of infetected file's MD5 Hash
ClamAV already support MD5 hashes -- LG
AlexMounier
Thanks for that information !!
Maybe I could give a few MD5 Hashes because I have a lot that
ClamAV is not detecting.
Just tell me how to submit them
Thanks
AlexMounier
</center-->