Malware Scanner

A tool to scan for malware on your system using YARA rules and a Flask web interface.

Features

• Scan files and directories for known malware signatures using YARA rules.
• Web interface to start scans and view results.
• Automatically update YARA rules from public repositories.

Prerequisites

• Python 3
• Pip
• Virtual Environment (optional but recommended)

Installation

1. Clone the repository:

   git clone <repository-url>
   cd malware_scanner
   

2. Create and activate a virtual environment (optional but recommended):

   virtualenv venv
   source venv/bin/activate
   

3. Install the dependencies:

   pip install -r requirements.txt
   

Updating YARA Rules

Run the following script to download and integrate the latest YARA rules from public repositories:

  python update_yara_rules.py

Usage

1. Start the Flask app:

   python run.py
   

2. Open your web browser and navigate to http://127.0.0.1:5000/.

3. Start a scan and view the results.

Project Structure

malware_scanner/ │ ├── app/ │ ├── init.py │ ├── routes.py │ ├── static/ │ │ └── styles.css │ └── templates/ │ └── index.html │ ├── scanner/ │ ├── init.py │ ├── scan.py │ ├── signature_database/ │ │ ├── integrated_rules.yar │ │ └── malware_signatures.yar │ ├── tests/ │ ├── init.py │ ├── run.py ├── requirements.txt └── update_yara_rules.py