🚀 go-pugleaf

About checking each file and/or program.  When you run a program, most of the
time it gets its "changed" bit changed.  This is why some backup programs offer
not to back up applications since you can waste a lot of disk space backing up
something that looks like it has changed, but really hasn't.  I don't think
that your method would work with applications or system files (they also get
changed when run, sometimes....).  Since the virus can't change anything until
it is run, and it will probably only change the program that is running (it
would get obvious if it started doing all the files on the HD).  All in all, I
don't think that the plan would work too well since too many are changed just
by normal use and might be hard to tell from virus changed....

Mark Cookson