Casper MalwareBytes Package
Here are my two scripts for install and scan with MalwareBytes on Casper. First one is to download, install and register MBBR:
#/bin/sh
MBBR Scanner
Ray Qiu
Feb 2, 2017
Download Installer
cd /tmp curl -LOk http://xxx.com/tools/mbbr-mac.zip sudo unzip -o mbbr-mac.zip
Install
sudo installer -pkg “/tmp/mbbr-mac.pkg” -target /
Registeration
MBBR_LICENSE=‘xxx’ MPATH=‘/usr/local/bin’ cd $MPATH ./mbbr register -key:$MBBR_LICENSE
Second one is to update Malwarebytes Database, rename existing log to old.log, and then scan the mac. Once it is done with the scanning, casper will check if the log file has any viruses entry inside, and then email to specific mailbox for result.
#!/bin/bash
Ray Qiu
Feb 8, 2017
HOST=$(hostname) count=0
Rename old log file
MBBRPATH=‘/usr/local/bin’ cd $MBBRPATH MACHINEID=$(./mbbr register | sed -nE ‘s/Machine ID:[[:space:]]*([0-9A-Z]*)/\1/p’) INFILE=”${MBBRPATH}/mbbr-logs/${MACHINEID}log.txt” [ -f $INFILE ] && mv $INFILE $MBBRPATH/mbbr-logs/Old.log
Start Scanning
./mbbr update SCANRESULTS=$(./mbbr scan -remove -noreboot -stdout:detail)
Check Result
egrep -iq ’[-0-9 :]*(OSX|Trojan).|[-0-9 :]*Adware.|[-0-9 :]*PUP.’ $INFILE if [ $? -eq 0 ] ; then count=$((count+1)) fi echo $count if [ $count -eq 0 ] ; then RESULT=“Casper MBBR Scanner: No Virus Found on $HOST” else RESULT=“Casper MBBR Scanner: Virus Found on $HOST” fi echo $RESULT mail -s “$RESULT” [email protected] [email protected] < $INFILE