Ok so whos going to be making the emulator for this AV? Also will you be doing entropy of a file to see if its packed? What about the numerous protectors out there? Who will make the unprotectors? Your bound to fail on this if your going to be using a reactive signature based AV. You need to make a proactive one. And virus names change all the time thats what mutexs() are for.