AntiPyrus-Scanner

---

Overview

AntiPyrus Scanner is a antimalware scanner written in python, with support for both python2 and python3. Its primary function is to scan files having python format for malicious syntax which are usually used in the desgin and launch of malicious attacks agains unsuspecting individuals.

Python being an interpreted language runs entirely in memory, as such python type programs which are malicious in nature can easily slip pass the watchful lens of antivirus and antimalware scanners, thus creating a serious threat. Python is a beautiful technology that is so diverse, and in this diversity also lies threats, AntiPyrus was designed to bridge said gap and aid in the creation of a more secure cyber age.

---

Mode Of Operation

AntiPyrus operates on a fairly simple logic. It reads a python file, crawling through each line in search of set key words ands syntax usually used in malware creation, it then;

• Displays the malicious line.
  
• Displays the malicious syntax in the line.
  
• Assesses the level of potential threat of the file.
  
• Offers recommended action to take to stay safe.
  

Usage

AntiPyrus is launched by passing desired arguments/options from the available list of options. To see the options, you can run AntiPyrus without an argument/option or pass the "-h"/"--help" argument.

Example:

thefixer@thefixer-# python Anti-Pyrus.py

result:

AntiPyrus requires arguments [options] to run.


usage:  Anti-Pyrus.py [-h] [--verbose] [--version]
              [--file   | --folder_scan   | --full_scan]

You can only pass one of the above scan types at once, you can however [optionally],

Pass "--verbose" with "--file " for much more detailed scan report.

e.g. python Anti-Pyrus.py --file <filename.py> --verbose 

See the option menu below for detailed help.

Overview:
=========

AntiPyrus is an Anti Malware Scanner for python file formats, because python runs in memory,
Antiviruses normally can't spot malicous python code,
AntiPyrus was designed to bridge that security gap, it feaures recursive scanning python files in a specified 
directory by passing the;

"--folder_scan <folder_name>",or a particular file by passing "--file <python_file_name>". 

You can also run a full scan or your``entire machine starting from the root drive [ "C:\" on windows ] or 
"/home" | "/Users" directories on linux and mac respectively.


NOTE: You can only pass either "--file","--folder_scan" or "--full_scan", You can't combine, just like you'r 
regular antivirus software allows.


        ======================================
        || Author: ThefixXxer               ||
        || Linkdin: Ikenna Alfred Managwu   |!
        || Follow me on Github: @ThefixXxer ||
        ======================================


optional arguments:
  -h, --help       show this help message and exit.
  --verbose        --> Determines quantity of information to display about discovered threats.
  --version        --> Show AntiPyrus current release version number.
  --file           --> Set a particular file to scan, if not used, all python files will be scanned,
                   Usage: python AntiPyrus.py --file suspicious_py_file.py
  --folder_scan    --> Scans all python files in specified folder,
                   Usage: python AntiPyrus.py --folder_scan /root/parent/.
                   NOTE!!: [ This should not be the path to file, rather a directory!! ].
  --full_scan      --> FULL SYSTEM SCAN !!, Scans all python format files from the root
                   directory for windows or the parent directories on linux and mac`<br>
                   ['C:\' or '/home' or '/Users'] respectively,
                   Usage: python AntiPyrus.py --full_scan.
                   

The above help text shows all options required to run AntiPyrus.

---

TODO

• Add a banner

Perharps

• Add scan parameters for other file types