New service - the Team Cymru Malware Hash Registry!

[Alex Broens]

On 10/28/2008 5:48 PM, --[ UxBoD ]-- wrote:
> If the result comes back positive to Malware could it be written to a
> local hash table ? Then when the scanner queries it looks at that
> first.  I would imagine that most of the time it is going to be the
> usual culprits so why keep querying upstream ?

Doesn't local DNS cache work for you?
seems cheaper to read DNS cache (in mmeory) than to write/read from 
local file/DB , or am I missing something?