Need to write an anti virus that uses the NIST NSRL database and operate it as a white list based AV. The db contains some 100 million hashes of known good binary files. I tried to crowd fund to do this but no one was interested. On Feb 13, 2014 4:48 AM, "Sim" <simvi...@gmail.com> wrote:
> Hello! > In the last weeks/months the unrecognized virus are increasingly > exponentially > (not only for Clamav but for all antivirus). > My idea is "block" all EXE/SRC (also into ZIP/RAR). > Executing "clamscan --debug filename" I can see: > > - LibClamAV debug: Recognized MS-EXE/DLL file > - Section contains executable code > > Which is the best solution/way to block all EXE/executable files? > > Thanks! > > --- > Sim > _______________________________________________ > Help us build a comprehensive ClamAV guide: > https://github.com/vrtadmin/clamav-faq > http://www.clamav.net/support/ml > _______________________________________________ Help us build a comprehensive ClamAV guide: https://github.com/vrtadmin/clamav-faq http://www.clamav.net/support/ml