<p>For the examiners who wish to locate malware in EnCase 6 based on virus signature, I have downloaded the latest VirusTotal database and compiled to an EnCase 6 Hash Set. Note that hashes are MD5 you need to hash your files first. Acknowledgments go to the <a href="https://www.virustotal.com/">VirusTotal</a> for making available the files. Use this <a href="https://docs.google.com/file/d/0B4_fd9ATmJuOLUhVTnM5V3A4TFk/">link for download</a>. Hash Set contains more than 18 millions of hashes.</p>