C:\Saw,

As I understood you, what you were saying was that the "signature" or "fingerprint" would be identical, no matter what the OS, because that is what identifies the malware?

Obviously the scanning engine code and stuff will be platform dependent, but the detection parameters will be consistent?

Having said that, I would expect there to be differences when an anti-malware uses behavioural and particularly sandboxing techniques? after all, if I try to run Windows malware it won't do anything, will it?

I recall that all Linux anti-malware apps were basically designed to protect Windows clients. Today they include stuff that is Linux only, but that is a small percentage.

Jockey~

But just answer a question: there need not be a scanner for Linux viruses (as there is no need at least as of now).
I don't quite agree with that today........... more and more stuff is coming out.......... not particularly cross-platform, or OS specific, but more targeting common applications and services vulnerabilities. I take the simplistic view that if it runs on Linux, then it is a Linux virus?