title: Memory Scan in c++
body: <p>I am working on a <strong>WIN32 project</strong> in <strong>Visual Studio 2010</strong>. I am trying to Scan my main memory through the ClamAV(open source antivirus) Engine for searching a malicious/infected file in main memory.</p>
  
  <p>The code i have written so far creates a snapshot of the whole main memory by using the windows function <em>CreateToolhelp32Snapshot</em></p>
  
  <p>Then i open a specific process from the snapshot, and pass this to the ClamAV engine, the engine then decides whether it is malicious or not. and i repeat the whole mechanism after every 10seconds. But i think this is not an efficient way,</p>
  
  <p>What i want to do is to scan my whole memory once, and after this i scan only those process which is newly created in the main memory. Kindly guide me is there any way to get newly created methods from the memory only and not the whole memory </p>