-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tracy Camp wrote: > > There where some threads back in April about a NT IFS filter driver, > native win32 port of clamav and NT service code. I couldn't find out > where the various pieces might be posted, in particular the filter > driver. I work on a IFS regularily and could insert some IFS filter > testing/debugging in with my regular work, but am un-certain how to > proceed in a useful manner here. > > Thanks, > > Tracy Camp
Probably nobody is really working with that because it's complicated for doing it alone and no serious team is still completed.If you have IFS basic driver I could help with integration clamav engine with it , however it looks like need rewrite because clamav is strictly file based not memory buffers (clamav is using a lot of temporary files) maybe it's possible to rewrite cl_gentemp function to use memory mapped files. IFS should postpone I/O operation during scan ,as I know it should be done by resubmitting IRP from completion routine - quite mystery for me because I'm working with device drivers only from time to time but not so frequently ;-D P.S. I offer my little help if you are interested but please remember that I'm now inactive due to extensive work (job issues) Regards Boguslaw Brandys -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.0 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDQNm+tuGICzHOh+YRAi3KAJsFM/+R73ZQA+xK04/tUzi9LlOahgCeNH8s j+JBPDs3wGBkd5hdkIxOvP8= =BPxi -----END PGP SIGNATURE----- _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html