I will look into the os armor. So, far what I have implemented in my AV, I added an option to disable execution of wscript (vbs, js) using registry and option to disable samba1 SMB1 (both are reportedly used by ransomwares). So far, sherpya has not replied on the docu on porting but i will wait and try to understand the code changes (the commit diffs).

I always thought that the ClamWin version of the Clam Av Windows port was made in order for it to run on Windows 98 computers. Win 98 is hardly used any more, so perhaps you do not have to worry about that.

it sounds like you are making progress.

Regards,