Spigot Anti-Malware icon

Spigot Anti-Malware -----

The beginning of a safe server




Changes
  • Re-enabled remote DB. No longer seems to be having issues when fetching the remote DB
  • Updated local DB file
Join my Discord Server for support and announcements.
----------, Jul 21, 2024

Changes
  • Added new detections
  • Possibly fixed some ForceOP related false-positives
Join my Discord Server for support and announcements.
----------, May 27, 2024

Changes
  • Added more ForceOP checks
  • Removed NonVanillaEnchantmentCheck. Too many false-positives and other checks do a better job
Join my Discord Server for support and announcements.
----------, Feb 7, 2024

Changes
  • Updated the local database
Join my Discord Server for support and announcements.
----------, Jan 29, 2024

Changes
  • Fixed SHA errors
  • Fixed issues related to files being scanned multiple times
Join my Discord Server for support and announcements.
----------, Jan 20, 2024

Changes
  • Attempted optimizations when scanning a large number of files (multiple thousands or 10s of thousands)
  • Rewrote a lot of code
Join my Discord Server for support and announcements.
----------, Sep 9, 2023

Changes
  • CacheContainer no longer throws errors when trying to load an invalid class
  • ForceOpCheckF should no longer throw errors
  • Removed server_hooked and minecraft_server_version_not_found messages
Join my Discord Server for support and announcements.
----------, Jun 22, 2023

Changes
  • Added a new ForceOP check
Join my Discord Server for support and announcements.
----------, Jun 18, 2023

Changes
  • Updated dependencies
Join my Discord Server for support and announcements.
----------, Jun 3, 2023

Changes
  • Temporarily disabled the remote database
  • Updated dependencies
  • Updated local database
Join my Discord Server for support and announcements.
----------, Feb 11, 2023

Changes
  • Removed anything related to server handling (starting the server, real-time protection, plugin indexing, transformers, etc). More information about this can be found in the #announcements page of my Discord Server.
  • Re-added setOp(true) check for ForceOpCheckA
  • Fixed an issue where jars that were plugins but didn't end in .jar, .zip, or .rar weren't scanned
  • Re-added info file. The update checker should function properly again
Join my Discord Server for support and announcements.
----------, Jan 4, 2023

Changes
  • Now checks to see if any jar in the scan directory includes a plugin.yml file. If it does it will be scanned.
Join my Discord Server for support and announcements.
----------, Dec 29, 2022

Changes
  • Fixed local database
Join my Discord Server for support and announcements.
----------, Oct 17, 2022

Changes
  • Fixed discord notification type
Join my Discord Server for support and announcements.
----------, Sep 30, 2022

Changes
  • Discord notifications no longer cause errors
  • Incorrect notification type code is no longer ran
  • Scanner now logs original jar regardless if unzipped info file exists or not
Join my Discord Server for support and announcements.
----------, Sep 29, 2022

Changes
  • Added new checks for the recent malware being mass uploaded
Join my Discord Server for support and announcements.
----------, Aug 3, 2022

Changes
  • Updated local database
  • Removed debug messages
Join my Discord Server for support and announcements.
----------, Jun 11, 2022

Changes
  • Added ForceOpCheckD class
  • No longer breaks if the SHA-1 checksum could not be loaded
Join my Discord Server for support and announcements.
----------, May 31, 2022

Changes
  • Removed metric functionality due to it being incomplete.
Join my Discord Server for support and announcements.
----------, Mar 30, 2022

Changes
  • Fixed a false-positive
Join my Discord Server for support and announcements.
----------, Feb 7, 2022

Changes
  • Fixed an issue with a check
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 5, 2022

Changes
  • Cleaned up the code
  • Fixed a bypass
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 1, 2022

Changes
  • Fixed a typo
  • Updated two checks
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 15, 2022

Changes
  • Updated a check
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Dec 1, 2021

Changes
  • Now supports running 1.18+ servers via the `--serverJar` argument
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Nov 30, 2021

Changes
  • Fixed an issue with a certain jar not being checked for correctly
  • Updated Dependencies
  • Made more messages translatable
  • Added `--dontLogINFOCR <boolean>` If true it doesn't log any INFO check results
  • Removed a useless check
  • Updates to java 17 to properly support 1.18 once it releases
  • Fixed a typo that made it so certain info couldn't be pulled from the database
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Nov 25, 2021

Changes
  • The Anti-Malware no longer causes false-positives by scanning itself
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Oct 18, 2021

Changes
  • Updated dependencies
  • Optimized the program
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Oct 9, 2021

Changes
  • Fixed an issue with the most recent update
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Sep 11, 2021

Changes
  • Fixed some bypasses
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Sep 11, 2021

Changes
  • Fixed some check issues
  • Fixed a security issue
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Aug 18, 2021

Changes
  • Fixes an issue with the message property files
  • Fixes an issue with NonVanillaEnchantCheck
  • Updated local database.db
  • Fixed some logging issues
  • Fixed some memory issues
  • AsyncPlayerChatEvent & PlayerChatEvent cancellations now log what was said if the server is started with the anti-malware and transformers are enabled
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jul 21, 2021

Changes
  • Adds a new malware detection method
  • Updated dependencies
  • Now supports Java 16
  • Disables blacklisted package check temporarily
  • Fixed a StackOverflowError
  • Fixed a Database issue
  • Fixed an error related to one of the checks
  • CLA now handles argument lists
  • Security Manager no longer throws a NullPointerException
  • Removed wait time for outdated builds
  • Cleaned up the messages
  • Removed un-used dependencies, jar is now roughly 21 MB
  • All exceptions now get logged to console
  • printNotInfectedMessages is now false by default so it doesn't clog up the log file
  • "probably not infected" messages now log properly
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jul 10, 2021

Changes
  • Rewrote the entire program
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, May 5, 2021

Changes
  • Removed a check that was causing StackOverflowErrors
  • Zipped files are now handled properly. They get unzipped to a temp file called AntiMalware/unzipped
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Apr 26, 2021

Changes
  • Fixes an Exception
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Apr 15, 2021

Changes
  • Merged java-deobfuscator, eventually the Anti-Malware will be able to properly handle obfuscated jars
  • Made even more messages translatable
  • Removed the spigot plugin scanner
  • Updates dependencies
  • Started work on allowing the ability to dump classes
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Apr 15, 2021

Changes
  • Fixes some exceptions
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Apr 3, 2021

Changes
  • Updated messages yet again
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 26, 2021

Changes
  • Fixed even more missing messages
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 26, 2021

Changes
  • Updated messages
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 26, 2021

Changes
  • Fixed an NPE
  • A CLI argument is now false by default
  • Added more translatable messages
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 26, 2021

Changes
  • Fixed an NPE caused by me rushing out the previous release
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 23, 2021

Changes
  • AnnotationObfuscationCheck
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 23, 2021

Changes
  • Fixed some translation messages
  • Cleaned the code up slightly
  • Updated messages and removed Chinese translation
  • Removed a debug message
  • Updated dependencies

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Mar 18, 2021

Changes
  • Fixed a typo
  • Fixed 2 bypasses
  • Updated CraftPlayerTransformer, malicious plugins can no longer get the players IP if you run the server via the AntiMalware
  • Implemented Metrics
METRICS
Currently only logs JVM and Memory stuff. More measurements will be implemented over time.
Usage:
--enableMetrics true --metricsToken <token> --metricsOrg <organization> --metricsBucket <bucket name> --metricsURL <url>​

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 25, 2021

Changes
  • Fixes a database issue
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 17, 2021

Changes
  • Updated Qlutch Check, again
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 17, 2021

Changes
  • Adds a new detection method
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 17, 2021

Changes
  • Checks for --serverJar being used before trying to get the server type
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 2, 2021

Changes
  • Fixed an issue making it so you can't run the server standalone
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Feb 1, 2021

Changes
  • Change the way Spigot Servers are recognized to the MANIFEST.MF
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 31, 2021

Changes
  • Hotfix for Systems having less than 4 cpu cores
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 31, 2021

Changes
  • Added paper support
  • Added Simplified Chinese translations
  • Cleaned the code up a bit
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 31, 2021

Changes
  • Now detects Runtime.getRuntime()#exec
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 28, 2021

Changes
  • Adds a new way of detecting malicious plugins
  • Cleaned up the code a bit
  • Fixed some messages & translation issues
  • logSM CLA is true by default
  • Fixed some methods not returning the correct values
  • Removed a Scanner log message until i come up with something better
  • Updated some transformers and added new ones
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 22, 2021

Changes
  • Fixed logging again
  • Added a new log message
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 6, 2021

Changes
  • Fixed logging
  • Removed obfuscation
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 6, 2021

Changes
  • Updates a lot of dependencies
  • SimplePluginManagerTransformer now checks loadPlugin and clearPlugins
  • Certain YML errors are no longer logged since there's nothing we can do
  • shouldPrintNotInfectedMessages is now checked for properly
  • The SecurityManager has been updated
  • Various changes to the database & how the AntiMalware scans files have been made
  • Updated the command line arguments, run the AntiMalware with --help to get a complete list of current ones
  • Updated the way notifications are handled
  • Some typos were fixed and more messages are logged now
  • The "EmptyPlugin" check is now logged as a "PUP" instead of as malicious
  • Now uses proguard to shrink file size

PROGUARD
Pro guarded specifically for size purposes. The unobfuscated jar is 16, 787KB

The proguard map:
https://github.com/OpticFusion1/MCAntiMalware/releases/download/8.1/proguard_map.txt

The proguard seed:
https://github.com/OpticFusion1/MCAntiMalware/releases/download/8.1/proguard_seed.txt

NOTIFICATIONS
Changed --windowsNotification <true> to --notify <type>
Current supported types are:
discord, popup, and console

discord notification:
If the "discord_webhook" system environment variable is set any time a malicious plugin is found it will send a message using that webhook
popup:
Send a popup with the relevant information needed
console:
how things are normally logged, this is also the default setting

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server
----------, Jan 6, 2021

We're working on re-doing the databases, at some point all previous versions will be limited to the databases provided in the jar, also causing it to break on auto-updates.

Changes

  • Rewrote and Optimized a variety of classes, performance and scanning should be better now
  • Updated dependencies
  • Switched to ByteBuddy, just about any version (Beta 1.5_02 and above) should now be runnable by the AntiMalware
  • Scanner is properly Multi-Threaded
  • Fixed a variety of bugs
  • Log messages are now prefixed with [AntiMalware]
  • Removed the logExceptions & debug command line arguments. Exceptions will always be logged, and debug messages where removed
  • Improved the PluginIndex exception message
  • Cleaned up SecurityManager logging
  • These and other changes can be found here
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here , in the discussion tab, or bring it up on the discord server

If you like my work you can donate to me here
----------, Sep 17, 2020

Changes
  • Files are now sorted by size before scanning (This should slightly speed things up)
  • Now logs a message if --serverJar isn't being used (--serverJar activates a custom SecurityManager & uses transformers to modify a bunch of classes to limit what malicious plugins can do)

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Sep 4, 2020

Changes
  • Detects some more stuff
  • Updated the DB provided in the jar
  • Hopefully fixes a ForceOP false-positive (You guys really need to report false-positives)
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Sep 2, 2020

Changes
  • Fixes a bypass
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Aug 29, 2020

Changes
  • Compiled using JDK 8, at some point my IDE's default JDK was set to 14... this should stop certain issues from happening
Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Aug 28, 2020

Changes
  • Removes debug messages that were accidentally left in

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Aug 26, 2020

Changes
  • Fixes an NPE caused by the author field in the plugin.yml file not being set

Join my Discord Server for support and announcements.

You can see every change on the github.

If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server

If you like my work you can donate to me here
----------, Aug 26, 2020

Changes
  • Fixed an issue where checks weren't triggered
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server
----------, Aug 26, 2020

Changes
  • Fixes 2 false positives
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server
----------, Aug 25, 2020

Changes
  • Fixes some issues
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server
----------, Aug 25, 2020

Changes
  • Adds support for 1.16.2
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a false-positive, issue, or have a feature request please make an issue here or bring it up on the discord server
----------, Aug 25, 2020

Changes
  • Plugins can no longer access any "optic_fusion1.mcantimalware" package
  • Removed the --shouldDisableMaliciousPlugins command line argument
  • --shouldNotifyWhenMalicious now defaults to false
  • The not_in_checksum_database message now requires debug messages to be logged
  • Fixed an issue where --shouldPrintNotInfectedMessages wasn't being used
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into an issue, find a false-positive, or have a feature request please make an issue here
or bring it up on my discord
----------, Aug 16, 2020

Changes
  • Updates databases

Reasoning for this is as follows
https://www.spigotmc.org/threads/***********-ad-spam.445302/
https://www.spigotmc.org/threads/more-***********-kangarko-stuff.448166
If kangarko wants this removed he needs to get his head out of his ass

Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 28, 2020

Changes
  • Properly supports 1.8-1.16.1
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 27, 2020

Changes
  • Fixes an NPE caused by --scanDirectory not being set
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 22, 2020

Changes
  • Fixes a NPE caused by the Scan Directory not existing
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 21, 2020

Changes
  • Fixes an issue where exceptions cause the program to crash
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 20, 2020

Changes
  • Fixes an IllegalArgumentException error
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 20, 2020

Changes
  • Fixes a NPE
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 20, 2020

Changes
  • Completely re-wrote the Scanner and RealTimeScanner which fixes a variety of Scanner and RTS issues
  • Added the --singleScan command line argument, if false it will do a 24/7 (until manually closed) scan, scanning any modified/created jars. If true it will scan all jars once and close its self
  • A lot of other changes, check the commits on the github to see all of them
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Jun 20, 2020

Changes
  • Rewrote a bunch of stuff
  • Fixed some of the ForceOP false-positives
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, May 20, 2020

Changes
  • Fixes an issue where the threshold wouldn't be met, even if the file was malicious
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Apr 9, 2020

Changes
  • Fixes an exception that gets thrown when trying to scan empty files
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem or have a false positive make a new issue here
----------, Mar 29, 2020

Changes
  • Throws more stuff behind a command line argument, use --help to get a list of command line arguments that you can use
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Mar 5, 2020

Changes
  • Updates the security manager
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Mar 5, 2020

Changes
  • Updated the local databases
  • Various changes to the code, see the github for these
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Feb 27, 2020

Changes
  • Fixed an issue related to scanning being broken
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Feb 15, 2020

Changes
  • Updated dependencies
  • Various other misc changes
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Feb 1, 2020

Changes
  • Updated the security manager
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Jan 26, 2020

Changes
  • Transformers now properly work with 1.15.2
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Jan 25, 2020

Changes
  • Adds some messages to better show what's happening
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Jan 21, 2020

Changes
  • USB flash drives now get scanned
  • Various other changes, look at the github commits :)
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Jan 21, 2020

Changes
  • The "--serverJar" CLA description has been changed to "Path to the server jar that should be ran"
  • Added the "runSecurityManager" CLA, by default this is set to true
  • Added the "useTransformers" CLA, by default this is set to true
  • Temporarily removed the ability for the AntiMalware to stop malicious plugins from opping users, due to lack of sleep i originally implemented a method that could be abused, this will be re-implemented at a later date after a bit more testing
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 22, 2019

Changes
  • Malicious plugins can no longer set a players gamemode
  • Malicious plugins can no longer set a players health
  • Malicious plugins can no longer give a player potion effects
  • Malicious plugins can no longer kick players
  • Malicious plugins can no longer enable or disable plugins
  • Malicious plugins can no longer op players (has been reverted in the newest update)
(only available with the --serverJar command line argument)
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 22, 2019

Changes
  • Malicious plugins are no longer able to cancel the AsyncPlayerChatEvent, this means malicious plugins have to find a new way to hide whoever does a malicious command (only available with the --serverJar command line argument)
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 20, 2019

Changes
  • Removes some debug messages
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 18, 2019

Changes
  • You can now scan any jar file
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 17, 2019

Changes
  • Removed a debug message
  • Fixed a typo
  • Various other misc changes
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Dec 8, 2019

Changes
  • Cleans the code up
  • Closes issue 248
  • Actually follows a coding style now
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 18, 2019

Changes
  • Fixed some check related issues & Updated a check
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 13, 2019

Changes
  • Updated the SecurityManager, now throws a hissy fit when connecting to even more urls
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 10, 2019

Changes
  • Fixes an issue related to the --serverJar command line argument
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 9, 2019

Changes
  • Fixed an issue related to handling command line arguments
  • Banned players now downloads a remote database
  • Fixes default command line arguments
  • Fixed an issue related to the parent directory not being reset
  • Updated the local databases
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 6, 2019

Changes
  • Rewrote some of the anti-malware, might have some issues. Due to a complete rewrite breaking more than i'd like i'll slowly be rewriting what i can over the next couple of updates
  • Adds some more banned players/UUIDS of players that get banned, one of the future updates will make this a remote DB like with the checks & checksums
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 6, 2019

Changes
  • Updates the SecurityManager, rewrite will have this be automatically updated like just about everything else
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 3, 2019

Changes
  • Should detect more malware, might be more false-positives due to the change
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Nov 3, 2019

Changes
  • Fixes another issue that's related to check registering
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 29, 2019

Changes
  • Fixes an issue related to checks being registered
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 29, 2019

Changes
  • Fixes an issue i just found
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 22, 2019

Changes
  • Fixes an issue related to scanning the server jar
  • Added --dumpClasses if true & --serverJar is set it will save every loaded class to AntiMalware/classpath
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 22, 2019

Changes
  • Adds missing translation messages
  • Fixes an NPE issue
  • Finishes adding the RunTimeProtection (RTP from this point on)
  • Now scans the directory the AntiMalware jar is in, as well as the specified scan directory. This means it's now possible for the server jar to be scanned, HOWEVER there will be false-positives from this.
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 21, 2019

Changes
  • Definitely fixes issues with a check
  • Adds the banMalAuthors command line argument, by default it's set to true, if it's true it bans malicious authors & possible alts
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 17, 2019

Changes
  • Fixes a issue with a check
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 17, 2019

Changes
  • Fixes more issues with banning players
  • Fixes an issue related to one of the checks not logging properly
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 17, 2019

Changes
  • replaced --printOnlyIfInfected with --printNotInfectedMessages by default --printNotInfectedMessages is set to true
  • Fixes an issue related to banning players
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 17, 2019

Changes
  • Sends some messages & disables the server if loaded as a plugin

Thanks @Janmm14 for the now (incredibly) obvious idea
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 17, 2019

Changes
  • Hopefully completely fixes an issue related to scanning & detecting malicious plugins
  • Now automatically bans malicious authors and possible alts. There will most likely be false-bans however this will be improved in a future update
Join my Discord Server for support and announcements.
You can see every change on the github. If you run into a problem make a new issue here
----------, Oct 16, 2019

Changes
  • The runtime protection (RTP) now requires the --serverJar command line argument (CLA) to be used for it to enable
  • Adds the --logExceptions CLA for more information on this CLA run the AntiMalware jar with the --help CLA
  • Updated the local database
  • Added a new check
  • Fixes other issues as usual you can see every change on the github
Join my Discord Server for support and announcements.
If you run into a problem make an issue report here
----------, Oct 13, 2019

Changes
  • Fixes an issue related to scanning
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Oct 11, 2019

Changes
  • Updated the Update Checker, shouldn't error any more
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Sep 27, 2019

Changes
  • Fixes issues related to the command line arguments
  • Fixes an issue related to AntiMalware still trying to get the scan directory, even if --scanFile is used
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Sep 26, 2019

Changes
  • --scanfile and --scandirectory are now --scanFile and --scanDirectory
  • Removed the ability to zip up possibly malicious plugins, due to the way things are handled this feature is pretty much impossible to add. This might be re-implemented at a later date in a different way however
  • Adds more translatable messages & fixes some miss-spellings, this will fix issues related to trying to get the "scan_dir_doesn't_exist" message
  • Adds heuristic analysis for strings, this should help deal with some false-positives (ForceOP false-positves are an exception, because they're an absolute pain to deal with).
  • Added the --serverJar <path> command line argument
  • Added the --serverArguments <arguments> command line argument
  • If --disableMalPlugins is set to true it now renames the file to <fileName>.disabled if it's a suspected malicious plugin, and if --serverJar is used it also disabled the plugin if enabled
  • Added some basic RealTimeProtection, this will be improved over time
  • Zip files are now properly scanned, they get unzipped to AntiMalware/unzipped/<uuid>
  • An update checker has been added
  • Updated all of the dependencies
  • Added basic forge support, although forge mods don't get checked completely as of right now
  • Probably more things that i've missed, but that's what the github link at the bottom of this message is for
Use the --help command line argument to get information about the current command line arguments, including the two newly added ones

Join my Discord Server for support and announcements.
You can see every change on the github (good luck, i couldn't be assed to clean the message up better before pushing to the master branch)
----------, Sep 26, 2019

Changes
  • Removed useless dependencies that made the jar much bigger than it needed to be
  • Adds an option for the tray popup on windows
  • Prevents database updates when the program's running
  • No longer randomly freezes while scanning
  • Various other optimizations, fixes and changes
COMMAND LINE OPTIONS
--windowsNotification [true/false] - If this is true, the program will make windows notify you if there was a malicious plugin found (if you run windows), by default this is set to false

Join my Discord Server for support and announcements.
You can see every change on the github
----------, Sep 4, 2019

Changes
  • Adds translations.
  • Adds the --language [lang] command line argument.
Command Line Argument
--language [lang] - Changes the language of the program, defaults to en
english is currently the only supported language, over time more languages will be supported

Join my Discord Server for support and announcements.
You can see every change on the github

Added thanks to @MrIvanPlays
----------, Sep 2, 2019

Changes
  • Now logs the string that was detected as malicious if you have debug enabled
  • Scanner now logs any exception if debug is enabled
  • TrayIcons now get removed after a few minutes
  • Fixes an issue related to the default scanning and scanning in directories
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Aug 24, 2019

Changes
  • The program now logs to the AntiMalware/logs directory
  • Updated the local database
You can see every change on the github
----------, Aug 12, 2019

Changes
  • Fixes an issue with --scanfile
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Jul 25, 2019

Changes
  • Updates the local database
  • Previous issue was a database issue, it was missing a single " character. The "temp" fix will stay however, since it should of been there since the beginning, fuck up on my part...twice
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Jul 24, 2019

Changes
  • Adds a temp fix to deal with remote databases not being downloaded properly
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Jul 24, 2019

Changes
  • Fixes an issue with console being filled with "file doesn't exist" msgs
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Jul 21, 2019

Changes
  • Now logs the line number where the possibly malicious code was found at
  • Now logs the SourceFile if there is one and it's not useless
  • Various other changes
Join my Discord Server for support and announcements.
You can see every change on the github
----------, Jul 10, 2019

Changes
  • Removes a check that's not needed
  • Updates a check so it detects a new method and has less false positives
  • Various misc changes
Join my Discord Server for support and announcements.
You can view every change on the github
----------, Jul 7, 2019

Changes
  • Fixes an issue with the wrong check name being logged....again
  • Re-implements the ability to zip malicious jars
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 23, 2019

Changes
  • Fixes an issue when it comes to downloading the check database
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 22, 2019

Changes
  • Check database now auto-updates and re-scans
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 22, 2019

Changes
  • Updates the database
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 21, 2019

Changes
  • Complete rewrite, see commit e69f8f9
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 18, 2019

Changes
  • Updated the logger
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 13, 2019

Changes
  • Adds a new check
Join my Discord Server for support and announcements.
If you want to see EVERY change you can on the github or my Discord Server
----------, Jun 11, 2019

Changes
  • Various changes
Join my Discord Server for support and announcements
----------, Jun 10, 2019

Changes
  • Various changes
Join my Discord Server for support and announcements
----------, Jun 9, 2019

Changes
  • Various changes
Join my Discord Server for support and announcements
----------, Jun 9, 2019

Changes
  • Adds a new check
Join my Discord Server for support and announcements
----------, Jun 9, 2019

Changes
  • Adds two more checks
Join my Discord Server for support and announcements
----------, Jun 9, 2019

Changes
  • Adds 3 new checks
Join my Discord Server for support and announcements
----------, Jun 9, 2019

Changes
  • Adds a new check
Join my Discord Server for support and announcements
----------, Jun 7, 2019

Changes
  • Fixes an issue with the classPath being empty in the log
Join my Discord Server for support and announcements
----------, May 30, 2019

Changes
  • Adds a new check
THE NEW CHECK
this plugin WILL break every plugin , it's logged as "NightVision+" and as a PUP

Join my Discord Server for support and announcements
----------, May 26, 2019

Changes
  • Adds a new check
Join my Discord Server for support and announcements
----------, May 23, 2019

Changes
  • Adds a new check
Join my Discord Server for support and announcements
----------, May 20, 2019

Changes
  • Last update broke everything somehow, this should fix it
Join my Discord Server for support and announcements
----------, May 20, 2019

Changes
  • --scanfile actually works as intended now
  • If you do --scanfile and the file doesn't exist, it will now log a message
  • General code cleanup (and messiness)
Join my Discord Server for support and announcements
----------, May 20, 2019

Changes
  • Fixes a false-positive related to the newest force-op check.
Join my Discord Server for support and announcements
----------, May 15, 2019

Changes
  • Adds a new check to detect new possible force-ops, due to this it will most likely false-positive
  • Deals with files that don't contain a plugin.yml better than previous versions
Join my Discord Server for support and announcements
----------, May 15, 2019

Changes
  • Adds a new check
Join my Discord Server for support
----------, May 7, 2019

Changes
  • Adds two new checks
  • Adds --help, this shows a help message and then quits the program
  • The AntiMalware now recursively scans directories
  • FalsePositive (one of the new checks) requires the --falsepositivesgalore true command line argument, as expected this will cause a LOT of false positives, however it's useful anyways
Join my Discord Server for support
----------, May 6, 2019

Changes
  • Fixes a typo
  • Cleans up the code
  • Adds a new check
Join my Discord Server for support
----------, May 2, 2019

Changes
  • Adds a new check
Join my Discord Server for support
----------, May 2, 2019

Changes
  • Removes single letter command line arguments
  • Adds --scanfile <filePath> - This allows you to scan a single file for malware

Current list of CommandLine arguments are as follows
--scandirectory <dirPath>
--zipMalPlugins <boolean>
--debug <boolean>
--scanfile <filePath>

Join my Discord Server for support
----------, Apr 30, 2019

Changes
  • Properly takes into account plugins/authors that have a . in their name
----------, Apr 24, 2019

Changes
  • Adds a new check
----------, Apr 23, 2019

Changes
  • Skips any author option that is an array and just checks for the name instead of authors.name. By checking for the author list it would search for [example, example2].pluginname which would always return false
----------, Apr 22, 2019

Changes
  • Fixes an issue related to jar files not being removable.
----------, Apr 20, 2019

Changes
  • Fixes an issue related to names/authors that had spaces in them
Any plugins NOT in the database will be scanned repeatedly, even if they're safe (I thought this was obvious, but i guess a note in the update log has to be added)

Also, even though one of the now deleted reviews said beta 1.5 plugins aren't supported, the Anti-Malware supports literally every version ever due to the plugin system never being changed. However when it comes to INCREDIBLY old versions, shit's going to break because of missing stuff, again i thought this was obvious but i guess not so this has to be added as well
----------, Apr 20, 2019

Changes
  • Fixes re-scanning issue (hopefully)
----------, Apr 19, 2019

Changes
  • Adds four new checks
  • Updates the AntiMalware so it now uses the SHA-1 database
  • Plugins now get re-scanned everytime the local database gets updated
----------, Apr 19, 2019

Changes
  • Fixes database downloader/Auto-Updater (This time, hopefully)
  • The auto-updater runes once after one hour, then every 4.
----------, Apr 16, 2019

Changes
  • Actually updates the database the checkmanager uses
----------, Apr 16, 2019

Changes
  • Adds the checksum checking. If a plugins checksum is in the database it will be skipped, premium plugins will always be scanned no matter what due to the Anti-Piracy spigot implements in them. If a plugin/plugin update isn't in the database it will be scanned.
----------, Apr 16, 2019

Changes
  • Fixes an issue related to plugin.yml files breaking things, instead of halting the entire program it will just log to console
----------, Apr 14, 2019

Changes
  • Some smaller things
  • A check now properly logs the class path that is possibly malicious
  • If you use the Windows OS and SystemTray is supported a notification pops up for any possible malicious plugin this detects.
[​IMG]

[​IMG]
----------, Apr 11, 2019

Changes
  • Updates all of the checks
  • Adds a new check
  • Adds the basics required for the checksum system, the rest will be added at a later date
What's the checksum system?
----------, Apr 10, 2019

Changes
  • Actually logs where the malicious code was found this time...
----------, Apr 8, 2019

Changes
  • Fixes a misspelling
----------, Apr 6, 2019

Changes
  • Exceptions are logged ONLY when debug is enabled
  • Added a new check
  • Updated the logging
  • Removed the disable command line argument, this will be re-added later
  • Now logs the class path that was detected as being malicious, this is good for me and anyone else who manually checks the plugins
----------, Apr 6, 2019

Changes
  • Cleaned the code up some more
  • Added a new logging level "EXCEPTION" so it will be easier to find exceptions and malicious plugins "WARNING"
  • Added a new check
  • A message now shows when it's done scanning saying that the program is waiting for more plugins to scan
  • Fixes issues related to the last three versions and me being dumb (now deleted due to them being broken)
  • Adds -d or -disable as a command line argument, this allows you to disable possibly malicious plugins from running, this however will disable false positives as well
  • Adds -s or -scan to chose what directory to scan
----------, Apr 4, 2019

Changes
  • The program should now be put in the server directory, this will fix the issue of the server trying to run it as a plugin
  • The program now logs to console when it's waiting for more plugins to scan
----------, Mar 29, 2019

Changes
  • Cleans up the code for one of the checks
  • Adds a new check
----------, Mar 25, 2019

Changes
  • Adds a new check
----------, Mar 24, 2019

Changes
  • Adds a new check
----------, Mar 24, 2019

Changes
  • Updates one of the checks
----------, Mar 23, 2019

Changes
  • fixes some false positives relating to certain checks, these fixes however have been applied to every check
  • Adds two new checks
----------, Mar 23, 2019

Changes
  • Changed how one of the Checks logs to the console and log file
----------, Mar 22, 2019

Changes
  • Updates one of the checks
----------, Mar 22, 2019

Changes
  • Code formatting
  • Fixes an issue with one of the checks, any malicious plugins using the fixed check should be properly flagged from now on
----------, Mar 22, 2019

Changes
  • Adds 15 new checks, 28 total
  • Hopefully fixed some of the false positives
----------, Mar 18, 2019

Changes
  • Adds a new check
----------, Mar 16, 2019

Changes
  • The program now detects force op plugins
----------, Mar 15, 2019

Fixes an issue with non-text files being treated as text files
ᴵ ˢʷᵉᵃʳ ᶦ ᵏⁿᵒʷ ʷʰᵃᵗ ᶦ'ᵐ ᵈᵒᶦⁿᵍ
----------, Mar 2, 2019

Updates more checks that were using older code which threw exceptions or logging to console instead of just skipping the class
----------, Mar 1, 2019

Fixes a miscateogrization of a malicious plugin
----------, Mar 1, 2019

Updates two checks since they were using older code which threw exceptions instead of just skipping the class
----------, Mar 1, 2019

Detects two new Malicious plugins.
----------, Mar 1, 2019

Fixes an issue with printing the wrong names when logging if a file is malicious or not
Updated some checks
----------, Mar 1, 2019

Fixes an issue with zipping malicious plugins
----------, Feb 27, 2019

Updated the logger
If a plugin is malicious it will be logged as [WARNING] otherwise it will be [INFO]
upload_2019-2-26_7-9-42.png
----------, Feb 26, 2019

Reclassified two plugins
Skips anything that is not a jar, rar, or zip
Fixes an issue with new plugins NOT being scanned
Now shows and logs what's NOT malicious as well as what's malicious
----------, Feb 26, 2019

Updated some of the checks
The program now logs to console as well as the log.txt file
added a way to automatically zip all suspected malicious plugins

HOW TO AUTO ZIP SUSPECTED MALICIOUS PLUGINS
  • run the MCAntiMalware.jar file like normal but add -z true upload_2019-2-25_15-25-15.png
  • After scanning if there are any malicious plugins it will create a folder called "malplugins" and move any suspected malicious plugins to that folder and then zip that folder up into a file called "malplugins.zip"
  • Upload the "malplugins.zip" file to a file hosting site like http://www.tinyupload.com/ and then PM me the download link
----------, Feb 25, 2019

Resource Information
Author:
----------
Total Downloads: 59,299
First Release: Feb 25, 2019
Last Update: Jul 21, 2024
Category: ---------------
All-Time Rating:
83 ratings
Version -----
Released: --------------------
Downloads: ------
Version Rating:
----------------------
-- ratings