command line IKARUS antivirus engine

[Hangar0]

https://www.ikarussecurity.com/en/

command line IKARUS antivirus engine
Ikarus T3 Scan command line tool can only scan and find malware. It does not remove the malware or disinfect the infected files;
in many cases that is enough to decide whether to delete a file.

https://www.ikarussecurity.com/wp-conte ... can_EN.pdf
... The result of the virus and malware analysis can be processed in either a manual or a script-controlled manner by triggering an (automatic) deletion ....
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
http://updates.ikarus.at/updates/update.html

T3 VDB (definitions data base) Version 106051 2023-06-14 20:15:43 MD5:5e8ff5c1a07d56b9aaac3104e6153791 t3sigs.vdb
T3 Commandline Scanner (32bit) Version 6001010 2023-03-20 14:01:22 MD5:90011c4a28d46601106dbe1d16a808e8 t3scan.exe
T3 Commandline Scanner (64bit) Version 6001010 2023-03-20 14:01:31 MD5:3c6125b5ee001f3bf5cac61e77a90ab3 t3scan_w64.exe
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Requires the IKARUS virus definitions database ( t3sigs.vdb), copied to the same location as the command-line tool ( t3scan.exe).

t3scan.exe -help

https://www.virustotal.com/gui/file/899 ... 9c6932344c
Popular threat label "vidro"

[Hangar0]

forgot to put this AV-ikarus-cmd-report

[Hangar0]

New Downloads for T3 ... 2023-09-07
http://updates.ikarus.at/updates/update.html

T3 VDB (definitions data base) Version 106325
T3 Commandline Scanner Version 6002005

[Hangar0]

http://updates.ikarus.at/updates/update.html

New Downloads ... 2024-02-14
T3 VDB (definitions data base) Version 106791
T3 Commandline Scanner Version 6003009

ikarust3scan.exe (Self-Extractor)
https://www.virustotal.com/gui/file/68a ... ?nocache=1
(4/60) Popular threat label: vidro

t3sigs.vdb
https://www.virustotal.com/gui/file/154 ... ?nocache=1
(0/60)

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

Display the program, engine and VDB version
t3scan.exe -version
IKARUS - T3SCAN V6.00.06 (WIN32)
Engine version: 6.03.09
VDB: 14.02.2024 19:16:12 (Build: 106791)
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

t3scan.exe -maxfilesize 1100 -logfile "log-ikarus.tmp" %Scan-object%
log-ikarus.tmp .......

Code: Select all

IKARUS - T3SCAN V6.00.06 (WIN32)
         Engine version: 6.03.09
         VDB: 14.02.2024 19:16:12 (Build: 106791)
         Copyright - IKARUS Security Software GmbH 2021.
         All rights reserved.

C:\Users\HanHan\Downloads\api-ms-win-core\eicar_com.zip:eicar.com - Signature 462103 'EICAR-Test-File' found
C:\Users\HanHan\Downloads\api-ms-win-core\eicar_com.zip - Signature 462103 'EICAR-Test-File' found
C:\Users\HanHan\Downloads\api-ms-win-core\njRAT-v0.6.4-V.7z:njRAT-v0.6.4/njRAT.exe:njRAT - Signature 3973073 'Trojan.Bladabindi' found
C:\Users\HanHan\Downloads\api-ms-win-core\njRAT-v0.6.4-V.7z:njRAT-v0.6.4/njRAT.exe - Signature 3973073 'Trojan.Bladabindi' found
C:\Users\HanHan\Downloads\api-ms-win-core\njRAT-v0.6.4-V.7z - Signature 3973073 'Trojan.Bladabindi' found
C:\Users\HanHan\Downloads\api-ms-win-core\Virus-test.7z:eicar_com.zip:eicar.com - Signature 462103 'EICAR-Test-File' found
C:\Users\HanHan\Downloads\api-ms-win-core\Virus-test.7z:eicar_com.zip - Signature 462103 'EICAR-Test-File' found
C:\Users\HanHan\Downloads\api-ms-win-core\Virus-test.7z - Signature 462103 'EICAR-Test-File' found
C:\Users\HanHan\Downloads\api-ms-win-core\Win32.XAgent-V.7z:Win32.XAgent/Win32.XAgent.bin - Signature 3490394 'Trojan.Sofacy' found
C:\Users\HanHan\Downloads\api-ms-win-core\Win32.XAgent-V.7z - Signature 3490394 'Trojan.Sofacy' found

  Summary:
  ==========================================================
    44 files scanned
    4 files infected
      (44 files contained 11 items, 6 infected)

    Used time: 0:01.031
  ==========================================================