the only problem in Bochs and qemu is they are built for supporting full virtualization . so emulate the hardware and the the cpu and they don't support emulating the operating system
so you need to emulate the operating system (Windows or Linux) you have a good choice is Pandora's Bochs but it's very slow and you couldn't use it in an antivirus because you can't run it inside an antivirus transparently Ida-emu could be modified to support running inside an antivirus. it's a good choice as it's fast and support windows and linux virtualization (emulating linux and windows) Pokas emulator is a good choice as it support conditional breakpoints without decreasing the performance and support many breakpoints. but it emulates only windows and a bit slower than ida-emu Thanks _______________________________________________ http://lurker.clamav.net/list/clamav-devel.html Please submit your patches to our Bugzilla: http://bugs.clamav.net