Batch Antivirus
As the previous thread was archived I'm creating this one because I'm doing some changes
ASeveral bugs have been fixed in Deep Scanner which makes it more effective against malware
AAnd I'm thinking of making a Batch Antivirus launcher, what do you think?
AI've already made one but it's ugly asf
ALet me know if you have any suggestion
Dseems like a neat idea, do you mean like a TUI?
Ayes
Asomething like that
HI can give you 45 million hashes.
AAre they sha256?
A@UEFI Ransomware
HNo I have only 700k in SHA256 files.
A"only"
AIf you could share the database somehow I'd highly appreciate it
DDo you have any concepts yet? I'd love to see what you have in mind
AWell not really I just made a launch menu
ABut i don't quite like it
DDo you use arrow keys or something to navagate it, or is it more of a
"1.) option1
2.) option2
: selection an option"
type thing?
"1.) option1
2.) option2
: selection an option"
type thing?
DBecause I can't imagine capturing keypresses with batch unless you can use the WinAPI in batch
A1 option 2 option xd
Athere are a couple of ways to do it without external programs
Dpowershell?
ANo, directly with batch
DReally?
Achoice command and xcopy command trick
DI've never heard of it, but it sounds like a hacky way to do it
ABatch Antivirus can now scan the executables of the current running processes
HI have total 6 million SHA256 hashes.
H5 million with name.
HOf the virus
HOpps 6.65m 5.65 virus names.
ABatch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.
ANew update to Batch Antivirus
A- DB updates
- Improved Deep Scan module
- Added Windows Defender tamper detection
- Improved administration requirement detection
- Improved fork bomb detection
- Adjusted weight of each particular detection in order to reduce false positives and false negatives
AAdded
.LowConfidence suffix on detections to avoid alerting the user when the detection isn't clearAI'm working on BAV which will have a completely new folder structure, a launcher menu, and many improvements in BAV.bat (which has been renamed to
BAVDisk.bat btw as BAV.bat is now the launcher)AA couple of bugs have been fixed in relation with deep scanner
A- Detection for obfuscated files wasn't working properly
- Argument parsing errors caused the program to ignore command-line arguments
AGreatly improved the quality of the readme and added extensive information
ADo you think that saying "World's most precise automated batch file behavior analyzer." is an exaggeration?
AI couldn't find any program, even professional antiviruses or sandboxes that detect so well the behavior of a particular batch file
AReleased Batch Antivirus v3.2.0
- Includes these changes previously mentioned
- Bug fixes
- Database update
AAdded detection for VM avoiding in deep scan
DHow do you go about detecting for a VM in batch? Just a curious question
DIncludes these changes previously mentionedFor future releases it may be better to say what changes where actually done, it'll prove useful if you want to do something like a Github release it's best to just be verbose about it
DI would be nice if you had a github link at the top of this post or pinned somewhere
AGitHub
Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning. - anic17/Batch-Antivirus
AMalware that detects VMs usually check for certain files only present on virtual machines (for example, some drivers) and weird vendor/BIOS information, such as Microsoft instead of American Megatrends
Alike
HKLM\SOFTWARE\VMware, Inc.\VMware ToolsAa regular computer doesn't have these registry keys