Page 1 of 4

PureAV - Antivirus in PureBasic - finally here

Posted: Fri Jun 30, 2006 5:34 pm
by Inf0Byt3
Hi, i am proud to announce you PureAV, an open source antivirus scanner
built totally in PureBasic4. This is the first public release and i guess it has lots of bugs inside. I am willing to continue improving it, but this needs very much time and help from you. I hope you like it and will find it usefull. The sources are included (please read the license before using it).

Download PureAV -> PureAV_v1.2.7z
Image

[Edit]
Forgot about it, here is a small decoy to test PureAV :D.
Not.A.Virus.PureAVTestFile -> Decoy.7z

Posted: Fri Jun 30, 2006 5:47 pm
by srod
*ucking hell InfoByt3.

First impressions - outstanding work. Well done. A good show piece for PB4 I reckon. 8)

If you don't mind me asking, where'd you get all the virus hashes from? You didn't really download all those viruses did you?

Anyhow, I'll keep testing......

**EDIT - hey keep this up and I for one would be happy to donate for this. A simple, but effective antivirus solution! Ever tried updating Mcafee antivirus? Bloody activex controls screw my system up almost every time!

Posted: Fri Jun 30, 2006 6:21 pm
by Inf0Byt3
Thank you very much for the feedback and for the kind words. I am more than happy to build something that helps. I will do my best do make it work better than a commercial one. About the hashes... Yes, I am nuts... I downloaded all the collections I found... When I was entering the virii dir, my computer was freezing because they were too many :lol: .

Posted: Fri Jun 30, 2006 7:56 pm
by Joakim Christiansen
It's a very nice and professional program! ;)

Here is a little screenshot I made of it:
Image

Posted: Fri Jun 30, 2006 8:27 pm
by Inf0Byt3
Thanks! Allready thinking to make a Control Center. I tried to make one but I didn't like how it was looking and working and I abandoned it. I will try to remake it as soon as I can...

Posted: Fri Jun 30, 2006 10:26 pm
by ricardo
Where we can update virus definitions? Are there some open-project to find this kind of stuff?

Posted: Fri Jun 30, 2006 10:33 pm
by GeoTrail
Wow, VERY impressive.
Don't have any viruses to really test it, but it looks freakin' A ;)

Posted: Fri Jun 30, 2006 10:33 pm
by Inf0Byt3
For now, I don't have any updates. I need people to send me undetected threats so I can add them to the database. I need a place where we can work on this project. BTW, I am working now on a simple updating engine and I will repack PureAV as soon as it's ready. If you know such a place where we can work on open-projects made in PureBasic, please announce me.

[Edit]
Sorry GeoTrail, (slow typer :D)... Thanks.

Posted: Fri Jun 30, 2006 10:37 pm
by kenmo
:shock: Very nice! (although I have no viruses to test on)

What does this do to infected files, just delete them?

By the way, if you click Scan Path and choose a folder, it doesn't scan that folder...

Posted: Fri Jun 30, 2006 10:46 pm
by Inf0Byt3
You can check the first post, I just added a decoy to show you how it acts when it founds something. It displays a messagebox.
About the scanner, yes, for now it only deletes or ignores infections, but I'm not planning to add disinfection support because it would be a pain and it's not a job for a single man... About the bug, it happends here too, I'm investigating this and I'll post a bugfix tomorrow. Thanks.

Posted: Fri Jun 30, 2006 11:13 pm
by Inf0Byt3
@kenmo, check this one out :D :If I start PureAV from the IDE, it works. When I create an executable and try to scan a path, it crashes. Can ayone confirm this?

Posted: Fri Jun 30, 2006 11:52 pm
by srod
I can't compile because I do not have the required libraries installed, but I can confirm that when scanning a selected path, PureAV simply scans my windows directory instead of the one I have selected!

Posted: Sat Jul 01, 2006 12:21 am
by flaith
Tested with the fake virus inside decoy.exe => ran ok.
But when it returned on the main window, it lost all the infos about the speed, number of files scanned, etc... all the numbers went to '0' ! :?

Posted: Sat Jul 01, 2006 12:31 am
by Inf0Byt3
Thanks for the reports. BTW, I think PureAV scans the windows dir first because the 'scan memory' option is enabled and it scans the dlls loaded in memory and the processes. Just try to disablw that option and make a scan... It should work. (well, excepting that crash after scanning 10-20 files).

@flaith: It's on the list now, thx.

I will remake the package, because it's a little bit messy and post tomorrow a nice 'remake' with all the bugs fixed and compilable from sources.

Posted: Sat Jul 01, 2006 12:44 am
by eJan
Great, keep making it better than some comercial.
Tested with EICAR.COM: http://www.eicar.org/anti_virus_test_file.htm but didn't detect it when scanned path.