- Notifications
You must be signed in to change notification settings - Fork109
TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.
License
develbranch/TinyAntivirus
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
TinyAntivirus (TinyAv) is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it. Now, TinyAv can detect and disinfect Sality polymorphic virus. In the future, I will deveplop some modules for removing other polymorphic viruses, such as Virut or Polip.
This project is released under theGPL2license.
- Microsoft Visual Studio 2015
- zlib 1.2.8 or newer
- unicorn-engine 0.9
- Clone the repository:
git clone https://github.com/develbranch/TinyAntivirus.git. - Build: Core engine, Console and scan module.
- You can see
ReleaseDirectory. Change theReleasedirectory and runTinyAvConsole.exe.
TinyAvConsole.exe [options]| Option | Meaning | Default value |
|---|---|---|
| -e | plug-in directory | current directory |
| -A | Archive scan depth | -1 : any depth |
| -D | scan depth | -1 : any depth |
| -d | path to scan | |
| -p | file pattern | *.* |
| -s | max file size in bytes | 10 * 1024 * 1024 (10 MB) |
| -m | Scan mode: Kill-virus (k) or Scan-only(s) | Kill-virus (k) |
| -h | Show usage |
You may scan all directories and files by using default values.
Example: Scan for all files (include ZIP files) to detect and disinfect virus.ZIP files which contain virus will be deleted.
C:\build>TinyAvConsole.exe -d C:\sample------------------------------------------------------TinyAntivirus version 0.1Copyright (C) 2016, Quang Nguyen. All rights reserved.Website: http://develbranch.com------------------------------------------------------Scanning ...C:\sample\calc.EXE W32.Sality.PE DisinfectedC:\sample\container.zip OKC:\sample\container.zip>DiskView.exe OKC:\sample\container.zip>DMON.SYS OKC:\sample\container.zip>sub_container.zip OKC:\sample\container.zip>sub_container.zip>NOTEPAD.EXE W32.Sality.PE DeletedC:\sample\dbgview.chm OKC:\sample\sub\gmer.EXE W32.Sality.PE Disinfected=============================================Scanned : 4 file(s) (10 object(s))Detected : 3 file(s)Removed : 3 file(s)Access denied : 0 file(s)C:\build>If you want to contribute, please pick up something from ourGithub issues.
I also maintain a list of more problems in aTODO list.
I have only one Sality sample to develop Sality killer module. I think there are many variant types of this file infector. Please send me samples which TinyAv can not detect or other kinds of polymorphic viruses. Thank you.
Blog:develbranch.com
About
TinyAntivirus is an open source antivirus engine designed for detecting polymorphic virus and disinfecting it.