Advice Request ClamAV signatures

[komir]

Hi, am using Windows 10.
Need to perform malware scan for some PHP files.

Is there any windows program to find malware inside PHP files?

If not, I see ClamAV allows adding custom signatures.
Here PHP Malware Signatures to ClamAV - Malware Expert are signatures I want to add.
1. First I install ClamAV ClamavNet
2. After that, on the bottom of the file C:\Program Files\ClamAV\freshclam.conf
add signatures
DatabaseCustomURL http://cdn.malware.expert/malware.expert.ndb
DatabaseCustomURL http://cdn.malware.expert/malware.expert.hdb
DatabaseCustomURL http://cdn.malware.expert/malware.expert.ldb
DatabaseCustomURL http://cdn.malware.expert/malware.expert.fp
3. After that, I add file C:\Program Files\ClamAV\database\whitelist.ign2
4. From the Powershell run scan
cd "c:\program files\clamav"
.\clamscan --recursive 'C:\Users\Mirko Lednicki\Downloads\php-malware\'
(folder php-malware contains some examples of the PHP malware)
But scan results give
----------- SCAN SUMMARY -----------
Known viruses: 6838622
Engine version: 0.102.1
Scanned directories: 2
Scanned files: 11
Infected files: 0
Data scanned: 0.76 MB
Data read: 0.40 MB (ratio 1.90:1)
Time: 47.163 sec (0 m 47 s)
What I am doing wrong?
Please help
Thank you

 

[Brahman]

This script remove malware of PHP files.

This script remove malware of PHP files. GitHub Gist: instantly share code, notes, and snippets.

gist.github.com