Official repository of Batch Antivirus. Batch Antivirus is a powerful antivirus suite written in batch with real-time protection and heuristical scanning. For a more in-depth explanation, go to Batch Antivirus webpage.
- World's most precise automated batch file behavior analyzer.
- Profoundly scans batch files
- Includes 23 unique behavior detection patterns
- Detects whether obfuscation techniques are used
- Bypasses commonly used anti-antivirus techniques
- Provides an accurate naming of new detections
- Returns a malicious behavior score over 100
- Online VirusTotal analysis
- Real-time protection
- Real-time file protection
- Real-time web protection
- Real-time process analyzer
- Kill protection for real-time protection
- Background real-time protection
- PC Monitor, which checks for disk space & CPU temperature
- Full drive & USB scanner
- USB shortcut malware remover
- Auto updater (both antivirus and databases)
- Custom database
- 193k SHA256 hash database with accurate detection names
- 313k IP database
- Autorun configuration of the antivirus
- Boot-time real-time protection that initiates before any other startup program (even
explorer.exe)
- Boot-time real-time protection that initiates before any other startup program (even
- Safe, isolated quarantine
- Includes a quarantine viewer with information about the files
- Files are base-64 encoded and ACL-locked, preventing even administrator-level processes from interacting with them
- An experimental file association interception
Regrettably, the answer is no. Batch Antivirus relies on a relatively small database (193k hashes). Despite its apparent size, the continuous emergence of new malware poses a significant challenge in maintaining up-to-date definitions. The more severe malware detections are kept up to date. Batch Antivirus provides effective file monitoring and common malware detection capabilities, however, the combined use of Batch Antivirus and an alternative antivirus solution is strongly recommended. Think of Batch Antivirus as an extra protection layer.
No, Batch Antivirus can be used portably. Real-time protection relies on folder change monitoring and not on kernel drivers. Although not needed, running real-time protection (RealTimeProtection.bat) and the drive scanner (BAV.bat) with administrator privileges to scan system files is recommended.
If you're willing to have better security, consider adding Batch Antivirus as an autorun with BAVAutorun.bat and selection option 3 (shell). Setting Batch Antivirus as your shell will run the protection before any other startup program.
The speed of drive scanning is constrained by the inherent limitations of batch processing, particularly in launching new processes. Nonetheless, significant optimizations have been implemented to speed up folder scanning during real-time protection.
No, Batch Antivirus doesn't collect any data because user's privacy is a priority. To get the active TCP connections, Batch Antivirus uses the command netstat -no to retrieve the data. Afterwards, the IPs found are looked up on VirusDataBaseHash.bav database to check if a malicious or blocked website was visited.
Contribute by creating a pull request. Alternatively, you can send malicious hashes at [email protected] or contact me
The Deep scanner module checks for patterns usually found in malware. Even though it has been adjusted to minimize false positives, it is impossible to mitigate all false positives. Programs that change registry settings or tweaker scripts are susceptible to false positives due to their potentially dangerous behavior.
You are allowed to distribute programs that use Batch Antivirus; however, please ensure proper attribution by crediting me and providing a link to this repository and any other component used (such as the databases). Your support in promoting this project is greatly valued and contributes to its visibility. Thank you for your cooperation.
Feel free to contact me on Discord (@anic17) or my server Program Dream.
Copyright © 2024 anic17 Software
