Spigot Anti-Malware

Changes · Re-enabled remote DB. No longer seems to be having issues when fetching the remote DB · Updated local DB file Join my Discord Server for support and announcements.

Changes · Added new detections · Possibly fixed some ForceOP related false-positives Join my Discord Server for support and announcements.

Changes · Added more ForceOP checks · Removed NonVanillaEnchantmentCheck. Too many false-positives and other checks do a better job Join my Discord Server for support and announcements.

Changes · Updated the local database Join my Discord Server for support and announcements.

Changes · Fixed SHA errors · Fixed issues related to files being scanned multiple times Join my Discord Server for support and announcements.

Changes · Attempted optimizations when scanning a large number of files (multiple thousands or 10s of thousands) · Rewrote a lot of code Join my Discord Server for support and announcements.

Changes · CacheContainer no longer throws errors when trying to load an invalid class · ForceOpCheckF should no longer throw errors · Removed server_hooked and minecraft_server_version_not_found messages Join my Discord Server for support and announcements.

Changes · Added a new ForceOP check Join my Discord Server for support and announcements.

Changes · Updated dependencies Join my Discord Server for support and announcements.

Changes · Temporarily disabled the remote database · Updated dependencies · Updated local database Join my Discord Server for support and announcements.

Changes · Removed anything related to server handling (starting the server, real-time protection, plugin indexing, transformers, etc). More information about this can be found in the #announcements page of my Discord Server. · Re-added setOp(true) check for ForceOpCheckA · Fixed an issue where jars that were plugins but didn't end in .jar, .zip, or .rar weren't scanned · Re-added info file. The update checker should function properly again Join my Discord Server for support and announcements.

Changes · Fixed local database Join my Discord Server for support and announcements.

Changes · Fixed discord notification type Join my Discord Server for support and announcements.

Changes · Discord notifications no longer cause errors · Incorrect notification type code is no longer ran · Scanner now logs original jar regardless if unzipped info file exists or not Join my Discord Server for support and announcements.

Changes · Added new checks for the recent malware being mass uploaded Join my Discord Server for support and announcements.

Changes · Updated local database · Removed debug messages Join my Discord Server for support and announcements.

Changes · Added ForceOpCheckD class · No longer breaks if the SHA-1 checksum could not be loaded Join my Discord Server for support and announcements.

Changes · Removed metric functionality due to it being incomplete. Join my Discord Server for support and announcements.

Changes · Fixed a false-positive Join my Discord Server for support and announcements.

Changes · Fixed an issue with a check Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Cleaned up the code · Fixed a bypass Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed a typo · Updated two checks Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updated a check Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Now supports running 1.18+ servers via the --serverJar argument Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed an issue with a certain jar not being checked for correctly · Updated Dependencies · Made more messages translatable · Added --dontLogINFOCR <boolean> If true it doesn't log any INFO check results · Removed a useless check · Updates to java 17 to properly support 1.18 once it releases · Fixed a typo that made it so certain info couldn't be pulled from the database Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · The Anti-Malware no longer causes false-positives by scanning itself Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updated dependencies · Optimized the program Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed an issue with the most recent update Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed some bypasses Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed some check issues · Fixed a security issue Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixes an issue with the message property files · Fixes an issue with NonVanillaEnchantCheck · Updated local database.db · Fixed some logging issues · Fixed some memory issues · AsyncPlayerChatEvent & PlayerChatEvent cancellations now log what was said if the server is started with the anti-malware and transformers are enabled Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Adds a new malware detection method · Updated dependencies · Now supports Java 16 · Disables blacklisted package check temporarily · Fixed a StackOverflowError · Fixed a Database issue · Fixed an error related to one of the checks · CLA now handles argument lists · Security Manager no longer throws a NullPointerException · Removed wait time for outdated builds · Cleaned up the messages · Removed un-used dependencies, jar is now roughly 21 MB · All exceptions now get logged to console · printNotInfectedMessages is now false by default so it doesn't clog up the log file · "probably not infected" messages now log properly Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Rewrote the entire program Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Removed a check that was causing StackOverflowErrors · Zipped files are now handled properly. They get unzipped to a temp file called AntiMalware/unzipped Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixes an Exception Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Merged java-deobfuscator, eventually the Anti-Malware will be able to properly handle obfuscated jars · Made even more messages translatable · Removed the spigot plugin scanner · Updates dependencies · Started work on allowing the ability to dump classes Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updated messages yet again Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed even more missing messages Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updated messages Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed an NPE · A CLI argument is now false by default · Added more translatable messages Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed an NPE caused by me rushing out the previous release Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · AnnotationObfuscationCheck Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed some translation messages · Cleaned the code up slightly · Updated messages and removed Chinese translation · Removed a debug message · Updated dependencies Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed a typo · Fixed 2 bypasses · Updated CraftPlayerTransformer, malicious plugins can no longer get the players IP if you run the server via the AntiMalware · Implemented Metrics METRICS Currently only logs JVM and Memory stuff. More measurements will be implemented over time. Usage: --enableMetrics true --metricsToken <token> --metricsOrg <organization> --metricsBucket <bucket name> --metricsURL <url>​ Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixes a database issue Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updated Qlutch Check, again Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Adds a new detection method Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Checks for --serverJar being used before trying to get the server type Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed an issue making it so you can't run the server standalone Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Change the way Spigot Servers are recognized to the MANIFEST.MF Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Hotfix for Systems having less than 4 cpu cores Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Added paper support · Added Simplified Chinese translations · Cleaned the code up a bit Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Now detects Runtime.getRuntime()#exec Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Adds a new way of detecting malicious plugins · Cleaned up the code a bit · Fixed some messages & translation issues · logSM CLA is true by default · Fixed some methods not returning the correct values · Removed a Scanner log message until i come up with something better · Updated some transformers and added new ones Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed logging again · Added a new log message Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Fixed logging · Removed obfuscation Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

Changes · Updates a lot of dependencies · SimplePluginManagerTransformer now checks loadPlugin and clearPlugins · Certain YML errors are no longer logged since there's nothing we can do · shouldPrintNotInfectedMessages is now checked for properly · The SecurityManager has been updated · Various changes to the database & how the AntiMalware scans files have been made · Updated the command line arguments, run the AntiMalware with --help to get a complete list of current ones · Updated the way notifications are handled · Some typos were fixed and more messages are logged now · The "EmptyPlugin" check is now logged as a "PUP" instead of as malicious · Now uses proguard to shrink file size PROGUARD Pro guarded specifically for size purposes. The unobfuscated jar is 16, 787KB The proguard map: https://github.com/OpticFusion1/MCAntiMalware/releases/do… The proguard seed: https://github.com/OpticFusion1/MCAntiMalware/releases/do… NOTIFICATIONS Changed --windowsNotification <true> to --notify <type> Current supported types are: discord, popup, and console discord notification: If the "discord_webhook" system environment variable is set any time a malicious plugin is found it will send a message using that webhook popup: Send a popup with the relevant information needed console: how things are normally logged, this is also the default setting Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

We're working on re-doing the databases, at some point all previous versions will be limited to the databases provided in the jar, also causing it to break on auto-updates. Changes · Rewrote and Optimized a variety of classes, performance and scanning should be better now · Updated dependencies · Switched to ByteBuddy, just about any version (Beta 1.5_02 and above) should now be runnable by the AntiMalware · Scanner is properly Multi-Threaded · Fixed a variety of bugs · Log messages are now prefixed with [AntiMalware] · Removed the logExceptions & debug command line arguments. Exceptions will always be logged, and debug messages where removed · Improved the PluginIndex exception message · Cleaned up SecurityManager logging · These and other changes can be found here Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server If you like my work you can donate to me here

Changes · Files are now sorted by size before scanning (This should slightly speed things up) · Now logs a message if --serverJar isn't being used (--serverJar activates a custom SecurityManager & uses transformers to modify a bunch of classes to limit what malicious plugins can do) Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server If you like my work you can donate to me here

Changes · Detects some more stuff · Updated the DB provided in the jar · Hopefully fixes a ForceOP false-positive (You guys really need to report false-positives) Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server If you like my work you can donate to me here

Changes · Fixes a bypass Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server If you like my work you can donate to me here

Changes · Compiled using JDK 8, at some point my IDE's default JDK was set to 14... this should stop certain issues from happening Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server If you like my work you can donate to me here

Changes · Removes debug messages that were accidentally left in Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server If you like my work you can donate to me here

Changes · Fixed an issue where checks weren't triggered Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

Changes · Fixes 2 false positives Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

Changes · Fixes some issues Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

Changes · Adds support for 1.16.2 Join my Discord Server for support and announcements. You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

Changes · Plugins can no longer access any "optic_fusion1.mcantimalware" package · Removed the --shouldDisableMaliciousPlugins command line argument · --shouldNotifyWhenMalicious now defaults to false · The not_in_checksum_database message now requires debug messages to be logged · Fixed an issue where --shouldPrintNotInfectedMessages wasn't being used Join my Discord Server for support and announcements. You can see every change on the github. If you run into an issue, find a false-positive, or have a feature request please make an issue here or bring it up on my discord

Changes · Updates databases Reasoning for this is as follows https://www.spigotmc.org/threads/***********-ad-spam.445302/ https://www.spigotmc.org/threads/more-***********-kangark… If kangarko wants this removed he needs to get his head out of his ass Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Properly supports 1.8-1.16.1 Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes an NPE caused by --scanDirectory not being set Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes a NPE caused by the Scan Directory not existing Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes an issue where exceptions cause the program to crash Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes an IllegalArgumentException error Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes a NPE Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Completely re-wrote the Scanner and RealTimeScanner which fixes a variety of Scanner and RTS issues · Added the --singleScan command line argument, if false it will do a 24/7 (until manually closed) scan, scanning any modified/created jars. If true it will scan all jars once and close its self · A lot of other changes, check the commits on the github to see all of them Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Rewrote a bunch of stuff · Fixed some of the ForceOP false-positives Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes an issue where the threshold wouldn't be met, even if the file was malicious Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Fixes an exception that gets thrown when trying to scan empty files Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem or have a false positive make a new issue here

Changes · Throws more stuff behind a command line argument, use --help to get a list of command line arguments that you can use Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Updates the security manager Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Updated the local databases · Various changes to the code, see the github for these Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Fixed an issue related to scanning being broken Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Updated dependencies · Various other misc changes Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Updated the security manager Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Transformers now properly work with 1.15.2 Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Adds some messages to better show what's happening Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · USB flash drives now get scanned · Various other changes, look at the github commits Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · The "--serverJar" CLA description has been changed to "Path to the server jar that should be ran" · Added the "runSecurityManager" CLA, by default this is set to true · Added the "useTransformers" CLA, by default this is set to true · Temporarily removed the ability for the AntiMalware to stop malicious plugins from opping users, due to lack of sleep i originally implemented a method that could be abused, this will be re-implemented at a later date after a bit more testing Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Malicious plugins can no longer set a players gamemode · Malicious plugins can no longer set a players health · Malicious plugins can no longer give a player potion effects · Malicious plugins can no longer kick players · Malicious plugins can no longer enable or disable plugins · Malicious plugins can no longer op players (has been reverted in the newest update) (only available with the --serverJar command line argument) Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Malicious plugins are no longer able to cancel the AsyncPlayerChatEvent, this means malicious plugins have to find a new way to hide whoever does a malicious command (only available with the --serverJar command line argument) Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Removes some debug messages Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · You can now scan any jar file Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Removed a debug message · Fixed a typo · Various other misc changes Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Cleans the code up · Closes issue 248 · Actually follows a coding style now Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here

Changes · Fixed some check related issues & Updated a check Join my Discord Server for support and announcements. You can see every change on the github. If you run into a problem make a new issue here