r3 - 10 Dec 2006 - 22:15:22 - AlexMounierYou are here: ClamAV Wiki >  Main Web  > ClamInternals

-- AlexMounier - 10 Dec 2006 Hello,

I think that ClamAV Should also base virus detection on MD5 Hashes as the detection and addition to new malware is rather simple, however it should not only rely on this method for detection, I believe this should be just a little something extra. The Advantages of using this MD5 Based detection is that it has a almost 100% detection accuracy, its fairly easy to implement and provides a faster detection of viruses while keeping the old one Pseudo code: Load MD5 List Get file being scanned's MD5 hash Search for the MD5 Hash of the file being scanned in the MD5 List. Perform the current binary search which is what ClamAV is relying on righ now. If you have any questions please email me at mnweb1 (at) gmail (dot) net

Alex

P.S: If you want I have a decent size collection of infetected file's MD5 Hash

ClamAV already support MD5 hashes -- LG

AlexMounier

Thanks for that information !! Maybe I could give a few MD5 Hashes because I have a lot that ClamAV is not detecting. Just tell me how to submit them

Thanks

AlexMounier


</center-->

Edit | WYSIWYG | Attach | Printable | Raw View | Backlinks: Web, All Webs | History: r3 < r2 < r1 | More topic actions
 
Powered by TWiki
This site is powered by the TWiki collaboration platformCopyright © by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding ClamAV Wiki? Send feedback