Giter Club home page Giter Club logo

kicomav's Introduction

KicomAV v0.33c

License Platform Platform Platform
Language

KicomAV is an open source (GPL v2) antivirus engine designed for detecting malware and disinfecting it. This antivirus engine is created and maintained by Kei Choi.

Requirements

Quick start

Three quick start options are available:

  • Download the latest release and unzip it.
  • Clone the repo: git clone git://github.com/hanul93/kicomav.git.
  • Build KicomAV Engine & Plugins modules : build.sh build or build.bat build
  • You can see Release Directory. Change the Release directory and run k2.py.

Usage

C:\kicomav\Release> python k2.py [path] [options]

Example 1 : KicomAV help Options

C:\kicomav\Release> python k2.py

KicomAV_Run

Example 2 : Update for malware signatures

C:\kicomav\Release> python k2.py --update

KicomAV_Update

Example 3 : Scan for current path

C:\kicomav\Release> python k2.py . -I

KicomAV_Scan

Example 4 : Scan for ZIP files

C:\kicomav\Release> python k2.py sample -r -I

KicomAV_Scan_Zip

Example 5 : Display Virus list

C:\kicomav\Release> python k2.py -V

KicomAV_Virus_list

Author

Kei Choi

Supporters

Supporters

kicomav's People

Contributors

hanul93 avatar jaepil avatar kijeong avatar pypygeek avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

kicomav's Issues

False report

Hi!
The deletion is marked as complete, but the deletion has not been completed.

[SHA-256]

  • 5EE3960DAB3F584E50078CC9D14C21B24D58FF4D826A189CFB386C76703C6844

  • 6CCF2E1EBFB0325E0578213F108326CD3AFE2104CF917A42310C94743E1FED3A

20210226_153447

Update failed

Update failed

The update.cfg url is loaded, but update.cfg is not downloaded, so an error occurs. download update.cfg and put it in the folder, an update success message appears, but the actual update does not occur.

kicomav version : 0.33b (Sep 24 2022)
OS : Windows 10.0.19044.2006
python : 3.9.6

Exception AttributeError

Error: KICOM Anti-Virus Engine set_plugins
Exception AttibuteError: "'nonetype' object has no attibute 'removetempdir'" in <bound method Engine.del of <kavcore.k2engine.Engine instance at 0x02850260>> ignored

That's the error message I get when ever I try to scan. It has no result afterwards and I don't know what is wrong. It is fully updated using the release build and everything.
image

Benefit from Armadito av?

First of all thanks for developing kicomav, opensource antivirus are a rare thing...

I am opening this ticket to suggest collaborating/benefitting from Armaditoav. About Armaditoav from the official site: "Armadito Antivirus is an antivirus that protects your computers and servers from malware and viruses.

Armadito includes classical signature-based malware detection and provides innovative heuristic detection modules for binaries (MS-Windows and GNU/Linux) and for PDF documents.

An intuitive and user-friendly interface gives access to all Armadito’s features: on-demand scanning, real-time protection, quarantine zone, threat detection journal…

Armadito is remotely manageable for enterprises and organisations using a central administration console."

Here is the project page: https://github.com/armadito/armadito-av

AFAIK it is just a gui of the antivirus, as it uses claimav for its cleaning. As end of 2019 Armadito seems stalled/dead, but maybe you could use to improve kicomav?

You have the engine, Armadito could give you the gui and you could get an opensource antivirus and alternative to clamav:)

How to know I/O Error File?

Hi,
I can't see all the results by scrolling.
How to know I/O Error File?

IO_ERROR

OS: Windows 10 Pro 64Bit
Python Version : 2.7.14
Kicom Engine Version : 0.32
DB : Last Upodated Sun May 26 02:43:40 2019 UTC Signature number: 2,375

How to Run Kicom? -> C:\kicom\Release > python k2.py C:\ -r -I

How can I participate in finding Kicom I/O errors?

안녕하세요.
C:\ 검사시 453개 파일에 대하여 I/O Error가 발생하는데 해당 파일을 수집하여 Kicom 엔진 개선에 참여하고 싶습니다.

검사된 명령 프롬프트에 스크롤을 올리면 전체 검사한 파일들이 나오는 것이 아닌 검사 종료까지에 일부 몇 십개에 파일결과만 알 수 있어서 오류가 발생한 파일을 찾기가 힘듭니다.

이 에러를 찾아 리포팅할 수 있는 방법을 알려주실 수 있을까요?

Python 3.5 이상 지원

Python 2.7은 버그 수정, 보안 패치 외에는 개발이 중단된 상태이고, 이마저도 2020년에 완전 중단될 예정입니다.
따라서 2.7과의 하위 호환성을 유지하면서 3.5 이상에서 문제 없이 동작하도록 수정을 제안합니다.

six, future 패키지 사용과 몇 가지 가이드라인을 지키면 쉽게 달성 가능한 목표이며, 최근 프로젝트들이 Python 3.x로 많이 옮겨가는 추세이기 때문에 의미 있는 작업이 될 거라 생각합니다.

Python 2.7, 3.5, 3.6 동시 지원이 괜찮다 생각하시면 제가 작업해보도록 하겠습니다.

관련 자료: http://python-future.org/

Folders and files not scanned when folder name contains []

Hi,
I found Folders and files not scanned when folder name contains []

io

OS: Windows 10 Pro 64Bit
Python Version : 2.7.13
Kicom Engine Version : 0.32
DB : Last Upodated Sun May 26 02:43:40 2019 UTC Signature number: 2,375

How to Run Kicom? -> C:\kicom\Release > python k2.py PATH\[test]plpbt-5.0.15 -f

Adding Unittest

I just opened this issue for others to search.

Adding Unittest to ensure that the source ported to Python3 runs perfectly.

Please hold for a moment.

Kicomav run

Don't have a downloader for that?
If not, which file should I run from?

test-build 실행 시 오류

< Error Contents Start >

Engine\plugins\alz.py
Engine\plugins\apk.py
Engine\plugins\attach.py
Engine\plugins\base1.py
Engine\plugins\coff.py
Engine\plugins\dummy.py
Engine\plugins\egg.py
Engine\plugins\eicar.py
Engine\plugins\emalware.py
Engine\plugins\embeded.py
Engine\plugins\hwp.py
Engine\plugins\kavutil.py
Engine\plugins\kernel.py
Engine\plugins\kicom.lst
Engine\plugins\macro.py
Engine\plugins\ole.py
Engine\plugins\olenative.py
Engine\plugins\pdf.py
Engine\plugins\pefile.py
Engine\plugins\pyz.py
Engine\plugins\script.py
Engine\plugins\upx.py
Engine\plugins\zip.py
23개 파일이 복사되었습니다.
1개 파일이 복사되었습니다.
Sample\dummy.alz
Sample\dummy.egg
Sample\dummy.txt
Sample\test.egg
Sample\test.zip
5개 파일이 복사되었습니다.
......
IOError: [Errno 2] No such file or directory: 'key.skr'
Traceback (most recent call last):
File "kmake.py", line 144, in
fp = open('key.skr', 'rt') # 개인키
IOError: [Errno 2] No such file or directory: 'key.skr'
D:\Install Files\악성코드분석\kicomav-master\Release\plugins*.pyc을(를) 찾을 수 없습니다.
1개 파일이 복사되었습니다.
..\Test\test_dummy_cure.py
1개 파일이 복사되었습니다.
E

ERROR: test_dummy_cure (unittest.loader.ModuleImportFailure)

ImportError: Failed to import test module: test_dummy_cure
Traceback (most recent call last):
File "c:\python27\lib\unittest\loader.py", line 254, in _find_tests
module = self._get_module_from_name(name)
File "c:\python27\lib\unittest\loader.py", line 232, in _get_module_from_name
import(name)
File "D:\Install Files\악성코드분석\kicomav-master\Release\test_dummy_cure.py", line 7, in
import kavcore
ImportError: No module named kavcore


Ran 1 test in 0.000s

FAILED (errors=1)

< Error Contents End >

참고 자료
D:\Install Files\악성코드분석\kicomav-master\Release>python -V
Python 2.7.12

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.