Computer Virus protector

Ac1ddr0p, on 19 June 2014 - 11:30 PM said:

Currently I've removed that fake progress bar, recoded everything, and am now wanting to know what people on their servers call their Viruses. I'll release this update but I will need to know names as so far it's just "Virus" and "trojan"

133spider, on 19 June 2014 - 11:52 PM said:

You should make it check a table, and from there if a existing file has the same name as a value in the assigned table it will delete it.

Example:

Spoiler

vLibrary = {"virus", "trojan"}

files = fs.list("/")

for i,v in pairs(files) do
  if vLibrary[v] ~= nil then
	fs.delete(v)
  end
end

local keywords = {
    ["rawset"] = "Destroy your computer! D-:";
    ["fs"] = "Access filesystem";
}

--# This is a function that theoriginalbit created
local function fsList(start)
  local function yieldFsList(startPath)
        local list = fs.list(startPath)
        for _, file in ipairs(list) do
          local path = fs.combine(startPath, file)
          if fs.isDir(path) then
                yieldFsList(path)
          else
                coroutine.yield(path, file)
          end
        end
  end

  return coroutine.wrap(function() yieldFsList(start or "/") end)
end

for fullpath, name in fsList("/") do --# Loop through all files on the computer
    local f = fs.open( fullpath, "r" ) --# open the file in mode 'r' to read the file
    local code = f.readAll() --# Assign the read data to the variable code
    f.close() --# Close the file when done
    for i, v in pairs( keywords ) do --# Loop through all the keywords
        if code:find( i ) then --# Check if you find any of the keywords in the code
            print( "Potentionally dangerous file: " .. fullpath .. ": trying to :" .. v )
        end
    end
end

TheOddByte, on 20 June 2014 - 12:08 AM said:

Even though this is more efficient than checking filenames you can't be sure that it's a virus, lot's of programs use fs and some use rawset. But that doesn't mean it's a virus

local falsePositives = {"directory/file1", "safeFile", "direc1/direc2/file"}

local keywords = {
    ["rawset"] = "Destroy your computer! D-:";
    ["fs"] = "Access filesystem";
}

local function fsList(start)
  local function yieldFsList(startPath)
	  local list = fs.list(startPath)
            for _, file in ipairs(list) do
                if falsePositives[file] == nil then -- #Checks if the file isn't in the table 'falsePositive'
                    local path = fs.combine(startPath, file)
                    if fs.isDir(path) then
                            yieldFsList(path)
                    else
                            coroutine.yield(path, file)
                    end
            end
	  end
  end

  return coroutine.wrap(function() yieldFsList(start or "/") end)
end


for fullpath, name in fsList("/") do
    local f = fs.open( fullpath, "r" )
    local code = f.readAll()
    f.close() --# Close the file when done
    for i, v in pairs( keywords ) do
        if code:find( i ) then
            print( "Potentionally dangerous file: " .. fullpath .. ": trying to :" .. v )
        end
    end
end