Could they make it so it keeps an MD5 database of the files and compares the file to the MD5 sum on load.

I think I have a disappearing , reappearing virus that jumps from file to file.

Then it doesn’t have to check a loaded file against the entire data base , just the MD5 sum.