yellowgg2 / kicomav

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it.

KicomAV v0.29

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it. This antivirus engine is created and maintained by Kei Choi.

Requirements

• Python 2.7
• pylzma
• yara
• backports.lzma

Quick start

Three quick start options are available:

• Download the latest release and unzip it.
• Clone the repo: git clone git://github.com/hanul93/kicomav.git.
• Build KicomAV Engine & Plugins modules : build.sh build or build.bat build
• You can see Release Directory. Change the Release directory and run k2.py.

Usage

C:\kicomav\Release> python k2.py [path] [options]

Example 1 : KicomAV help Options

C:\kicomav\Release> python k2.py
------------------------------------------------------------
KICOM Anti-Virus II (for WIN32) Ver 0.29 (Jan 08 2018)
Copyright (C) 1995-2018 Kei Choi. All rights reserved.
------------------------------------------------------------

Usage: k2.py path[s] [options]
Options:
        -f,  --files           scan files *
        -r,  --arc             scan archives
        -G,  --log=file        create log file
        -I,  --list            display all files
        -e,  --app             append to log file
        -F,  --infp=path       set infected quarantine folder
        -R,  --nor             do not recurse into folders
        -V,  --vlist           display virus list
        -p,  --prompt          prompt for action
        -d,  --dis             disinfect files
        -l,  --del             delete infected files
             --no-color        don't print with color
             --move            move infected files in quarantine folder
             --update          update
             --verbose         enabling verbose mode (only Developer Edition)
             --sigtool         make files for malware signatures
        -?,  --help            this help
                               * = default option
			       
C:\kicomav\Release> _

Example 2 : Update for malware signatures

C:\kicomav\Release>k2.py --update
------------------------------------------------------------
KICOM Anti-Virus II (for WIN32) Ver 0.29 (Jan 08 2018)
Copyright (C) 1995-2018 Kei Choi. All rights reserved.
------------------------------------------------------------

plugins/emalware.c01 .... update
plugins/emalware.i01 ..... update
plugins/emalware.n01 ........ update
plugins/emalware.s01 .. update

[Update complete]

C:\kicomav\Release> _

Example 3 : Scan for current path

C:\kicomav\Release> python k2.py .
------------------------------------------------------------
KICOM Anti-Virus II (for WIN32) Ver 0.29 (Jan 08 2018)
Copyright (C) 1995-2018 Kei Choi. All rights reserved.
------------------------------------------------------------
Last updated Thu Jan  8 07:50:42 2018 UTC
Signature number: 1,675

C:\kicomav\Relea ... 08ecba90d0cd778  infected : Trojan-Ransom.Win32.Snocry.cxu
C:\kicomav\Release\ ... 218e8a8d7eb93df1003  infected : Trojan.Win32.Agent.icgh


Results:
Folders           :4
Files             :37
Packed            :0
Infected files    :2
Suspect files     :0
Warnings          :0
Identified viruses:2
I/O errors        :0


C:\kicomav\Release> _

Example 4 : Scan for ZIP files

C:\kicomav\Release> python k2.py sample\test.zip -r -I
------------------------------------------------------------
KICOM Anti-Virus II (for WIN32) Ver 0.29 (Jan 08 2018)
Copyright (C) 1995-2018 Kei Choi. All rights reserved.
------------------------------------------------------------
Last updated Thu Jan  8 07:50:42 2018 UTC
Signature number: 1,675

C:\kicomav\Release\sample\test.zip  ok
C:\kicomav\Relea ... .zip (dummy.txt)  infected : Dummy-Test-File (not a virus)


Results:
Folders           :0
Files             :2
Packed            :1
Infected files    :1
Suspect files     :0
Warnings          :0
Identified viruses:1
I/O errors        :0


C:\kicomav\Release> _

Example 5 : Display Virus list

C:\kicomav\Release> python k2.py -V
------------------------------------------------------------
KICOM Anti-Virus II (for WIN32) Ver 0.29 (Jan 08 2018)
Copyright (C) 1995-2018 Kei Choi. All rights reserved.
------------------------------------------------------------
Last updated Thu Jan  8 07:50:42 2018 UTC
Signature number: 1,675

Dummy-Test-File (not a virus)                      [dummy.kmd]
EICAR-Test-File (not a virus)                      [eicar.kmd]
Backdoor.Linux.Mirai.a.gen                         [emalware.kmd]
Trojan-Ransom.NSIS.MyxaH.niz                       [emalware.kmd]
Trojan-Ransom.NSIS.Onion.afvz                      [emalware.kmd]
Trojan-Ransom.Win32.Agent.aagy                     [emalware.kmd]
Trojan-Ransom.Win32.Agent.aahp                     [emalware.kmd]

...

Trojan.Win32.Inject.adnta                          [emalware.kmd]
Trojan.Win32.Inject.wnfq                           [emalware.kmd]
Trojan.Win32.Invader                               [emalware.kmd]
Trojan.Win32.KillDisk.gen                          [emalware.kmd]
Trojan.Win32.Menti.gen                             [emalware.kmd]
Worm.Script.Generic                                [emalware.kmd]
Virus.MSExcel.Laroux.Gen                           [macro.kmd]
Exploit.HWP.Generic                                [hwp.kmd]


C:\kicomav\Release> _

Author

Kei Choi

• http://www.hanul93.com
• http://twitter.com/hanul93
• http://facebook.com/hanul93
• http://github.com/hanul93

Supporters