Script Spy

bizzel · 22-02-2008, 10:00 AM

I'm still hacking away at my helpdesk project but in the meantime I've been working on another program - somewhat like ANFS. Script Spy is a scanner for malicious scripts designed for use on medium/large networks. It features an efficient scanning engine and integration with ClamAV.

I'll be putting in a few niceties, such as the ability to find hidden scripts (eg. a .bat renamed to a .jpg), virus scanning of found scripts with ClamAV and automatic signature updates. Unlike my helpdesk, I'll have Beta quality code available in a couple of weeks time.

plexer · 22-02-2008, 10:12 AM

looks good.

Ben

Dos_Box · 22-02-2008, 10:26 AM

Ooooh. Handy.

kmount · 22-02-2008, 12:06 PM

Looking forward to giving that a whirl, good job.

Sylv3r · 22-02-2008, 12:52 PM

Sounds good.

Thanks

bizzel · 25-02-2008, 08:38 PM

Well I had a really quiet day at work (something that's happily becoming more common!) so I've been hacking away at the code. I've managed to almost double the speed of the scanning code and it's quite a lot more stable now. Using regular expression matching I've got the scanning engine hitting 4GB a second on a Pentium M 1.7 with 1GB RAM. That's also on a 4200rpm disk!

Obviously that will vary depending on the disk speed and whether you're scanning over the network as opposed to locally. Either way, I'm sure this is several times faster than using the built-in Windows search, not to mention that it scans for all specified filetypes in 1 run.

I've also optimised the threading so the GUI remains nicely responsive throughout. Hopefully I should have a working copy for you to try by the end of the week.

bizzel · 09-03-2008, 01:15 AM

Well the end of the week came and went and, like all programming deadlines, this one wasn't met. I've had a lot of difficulties with the scanning engine due to an interesting quirk of the .net framework when it comes to handling folder security.

I haven't given up though, the scanning is faster than ever. All that remains now is to squash a few bugs (I've already fixed a lot) and complete the front end. In order to make it as reliable as possible, I'm debugging it on a clone of my filesystem which I've deliberately corrupted. No deadlines this time, it's done when it's done.

Welcome, Register for free! or Login below:
User Name		Remember Me?
Password

22-02-2008, 10:00 AM	#1
bizzel Join Date: Jul 2007 Location: Durham Posts: 427 Thanks: 47 Thanked 74 Times in 23 Posts Rep Power: 16	Script Spy I'm still hacking away at my helpdesk project but in the meantime I've been working on another program - somewhat like ANFS. Script Spy is a scanner for malicious scripts designed for use on medium/large networks. It features an efficient scanning engine and integration with ClamAV. I'll be putting in a few niceties, such as the ability to find hidden scripts (eg. a .bat renamed to a .jpg), virus scanning of found scripts with ClamAV and automatic signature updates. Unlike my helpdesk, I'll have Beta quality code available in a couple of weeks time. Last edited by bizzel; 09-03-2008 at 01:11 AM..

25-02-2008, 08:38 PM	#6
bizzel Join Date: Jul 2007 Location: Durham Posts: 427 Thanks: 47 Thanked 74 Times in 23 Posts Rep Power: 16	Well I had a really quiet day at work (something that's happily becoming more common!) so I've been hacking away at the code. I've managed to almost double the speed of the scanning code and it's quite a lot more stable now. Using regular expression matching I've got the scanning engine hitting 4GB a second on a Pentium M 1.7 with 1GB RAM. That's also on a 4200rpm disk! Obviously that will vary depending on the disk speed and whether you're scanning over the network as opposed to locally. Either way, I'm sure this is several times faster than using the built-in Windows search, not to mention that it scans for all specified filetypes in 1 run. I've also optimised the threading so the GUI remains nicely responsive throughout. Hopefully I should have a working copy for you to try by the end of the week. Last edited by bizzel; 09-03-2008 at 01:13 AM..

09-03-2008, 01:15 AM	#7
bizzel Join Date: Jul 2007 Location: Durham Posts: 427 Thanks: 47 Thanked 74 Times in 23 Posts Rep Power: 16	Well the end of the week came and went and, like all programming deadlines, this one wasn't met. I've had a lot of difficulties with the scanning engine due to an interesting quirk of the .net framework when it comes to handling folder security. I haven't given up though, the scanning is faster than ever. All that remains now is to squash a few bugs (I've already fixed a lot) and complete the front end. In order to make it as reliable as possible, I'm debugging it on a clone of my filesystem which I've deliberately corrupted. No deadlines this time, it's done when it's done. Last edited by bizzel; 09-03-2008 at 02:28 PM..

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Joomla Theme's	FN-GM	Web Development	4	01-09-2007 04:57 PM
Ranger and XP theme	starscream	Network and Classroom Management	8	03-07-2007 09:24 PM
Deploying a XP theme through GPO	Kyle	Windows	5	11-03-2007 09:42 PM
Christmas Theme	SimpleSi	General Chat	16	19-12-2005 10:28 AM

		EduGeek.net Forums > Coding and Web Development > Scripts
Script Spy

22-02-2008, 10:12 AM	#2
plexer Join Date: Dec 2005 Location: Norfolk Posts: 4,059 Thanks: 30 Thanked 86 Times in 85 Posts Rep Power: 30	looks good. Ben

22-02-2008, 10:26 AM	#3
Dos_Box Join Date: Jun 2005 Location: Preston, Lancashire Posts: 3,618 Thanks: 7 Thanked 110 Times in 53 Posts Blog Entries: 6 Rep Power: 37	Ooooh. Handy.

22-02-2008, 12:06 PM	#4
kmount Join Date: Feb 2007 Location: Northamptonshire Posts: 1,378 Thanks: 51 Thanked 105 Times in 102 Posts Rep Power: 25	Looking forward to giving that a whirl, good job.

22-02-2008, 12:52 PM	#5
Sylv3r Join Date: Jul 2005 Location: Co. Durham Posts: 1,008 Thanks: 24 Thanked 42 Times in 30 Posts Rep Power: 16	Sounds good. Thanks

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools	Search Thread
Show Printable Version Email this Page	Search Thread: Advanced Search

Register now for FREE and post messages!
Username: Password: Confirm Password: E-Mail: Confirm E-Mail: Birthday: Image Verification I agree to forum rules