Skip to content

Batch Antivirus, a powerful antivirus suite written in batch with real-time protection and heuristical scanning.

License

Notifications You must be signed in to change notification settings

anic17/Batch-Antivirus

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Batch Antivirus

batch-antivirus-stars batch-antivirus-forks batch-antivirus-downloads batch-antivirus-license batch-antivirus-issues

Official repository of Batch Antivirus. Batch Antivirus is a powerful antivirus suite written in batch with real-time protection and heuristical scanning. For a more in-depth explanation, go to Batch Antivirus webpage.

Features of Batch Antivirus

  • World's most precise automated batch file behavior analyzer.
    • Profoundly scans batch files
    • Includes 23 unique behavior detection patterns
    • Detects whether obfuscation techniques are used
    • Bypasses commonly used anti-antivirus techniques
    • Provides an accurate naming of new detections
    • Returns a malicious behavior score over 100
    • Online VirusTotal analysis
  • Real-time protection
    • Real-time file protection
    • Real-time web protection
    • Real-time process analyzer
    • Kill protection for real-time protection
    • Background real-time protection
    • PC Monitor, which checks for disk space & CPU temperature
  • Full drive & USB scanner
    • USB shortcut malware remover
  • Auto updater (both antivirus and databases)
  • Custom database
    • 193k SHA256 hash database with accurate detection names
    • 313k IP database
  • Autorun configuration of the antivirus
    • Boot-time real-time protection that initiates before any other startup program (even explorer.exe)
  • Safe, isolated quarantine
    • Includes a quarantine viewer with information about the files
    • Files are base-64 encoded and ACL-locked, preventing even administrator-level processes from interacting with them
  • An experimental file association interception

Frequent Asked Questions

Is Batch Antivirus suitable for use as a primary antivirus solution?

Regrettably, the answer is no. Batch Antivirus relies on a relatively small database (193k hashes). Despite its apparent size, the continuous emergence of new malware poses a significant challenge in maintaining up-to-date definitions. The more severe malware detections are kept up to date. Batch Antivirus provides effective file monitoring and common malware detection capabilities, however, the combined use of Batch Antivirus and an alternative antivirus solution is strongly recommended. Think of Batch Antivirus as an extra protection layer.

Does Batch Antivirus need to be installed?

No, Batch Antivirus can be used portably. Real-time protection relies on folder change monitoring and not on kernel drivers. Although not needed, running real-time protection (RealTimeProtection.bat) and the drive scanner (BAV.bat) with administrator privileges to scan system files is recommended.
If you're willing to have better security, consider adding Batch Antivirus as an autorun with BAVAutorun.bat and selection option 3 (shell). Setting Batch Antivirus as your shell will run the protection before any other startup program.

Why is scanning so slow?

The speed of drive scanning is constrained by the inherent limitations of batch processing, particularly in launching new processes. Nonetheless, significant optimizations have been implemented to speed up folder scanning during real-time protection.

Does web protection register websites I visit?

No, Batch Antivirus doesn't collect any data because user's privacy is a priority. To get the active TCP connections, Batch Antivirus uses the command netstat -no to retrieve the data. Afterwards, the IPs found are looked up on VirusDataBaseHash.bav database to check if a malicious or blocked website was visited.

I accidentally found some malware, where can I send you the SHA256 hash?

Contribute by creating a pull request. Alternatively, you can send malicious hashes at batch.antivirus@gmail.com or contact me

Why does the heuristical analyzer sometimes detects legitimate programs?

The Deep scanner module checks for patterns usually found in malware. Even though it has been adjusted to minimize false positives, it is impossible to mitigate all false positives. Programs that change registry settings or tweaker scripts are susceptible to false positives due to their potentially dangerous behavior.

What do I need to do if I want to use a part of the antivirus?

You are allowed to distribute programs that use Batch Antivirus; however, please ensure proper attribution by crediting me and providing a link to this repository and any other component used (such as the databases). Your support in promoting this project is greatly valued and contributes to its visibility. Thank you for your cooperation.

Contact

Feel free to contact me on Discord (@anic17) or my server Program Dream.

Copyright © 2024 anic17 Software