Sure, if you or anyone get hold of any article please let me know. My current work requires me to do about 30% to 40% dev work, rest prototypeing, and I’m actively involved with some inards of viruses. I’ve also tested quite a few sdk’s. But frankly, Clam-AV has enough guts to start at a level 3 to 4 on 1 to 10 scale. I played with it on a SUSE linux build, and usually open source has closed docs. And the windows port there is perl based, so an windows port would be great…
For hidden/evolutionary(polimorphic> etc. you will find enough informations if you actively search. FOr encripted viruses etc. sure there are stuff that needs to be tackled …
-pro