An algorithm to Identify Batch Malware and the Performance of such Malware against Modern Antivirus Softwares

Abstract

This paper studies computer viruses in batch file format. A batch file is a kind of script file in DOS, OS/2 and Microsoft Windows. It consists of a series of commands to be executed by the command-line interpreter, stored in a plain text file. A batch file may contain any command the interpreter accepts interactively and use constructs that enable conditional branching and looping within the batch file. In this method, viruses aren’t identified by modern antivirus softwares, including Norton Antivirus and Kaspersky. In this paper, we compare the effectiveness of batch viruses along with their corresponding viruses in executable file format. Also a survey was conducted to analyze public knowledge on batch viruses. This paper also explores an algorithm for antiviruses to identify and neutralize batch file viruses.