aminet-scannerlisted

# Aminet Scanner ## Purpose Provides multi-layer virus scanning for Aminet packages targeting the Amiga malware landscape. Combines signature-based detection (52 virus signatures in ClamAV .ndb format), heuristic analysis of hunk structures and boot blocks, quarantine management with atomic file isolation, and a scan orchestrator that coordinates all layers into unified scan reports with configurable depth levels. ## Capabilities - 52 virus signatures across 3 JSON database files (boot block, file, hunk viruses) - Context-aware scanBuffer with hex pattern matching and wildcard bitmasks - Boot block and hunk type dispatch for targeted scanning - Sub-2-second scanning for 500KB files against 50 signatures - Last-wins deduplication for extensible signature JSON drop-in - 8 heuristic rules: 4 hunk-based, 4 boot block-based - Zero false positives on legitimate Amiga files - Worst-case verdict derivation across all findings - Quarantine with atomic file moves and metadata sidecars - Path traversal prevention on quarantine operations - Restore round-trip (quarantine and recover) - FS-UAE + CheckX emulated scanning with AbortController timeout - Community checksum cross-reference for known-good verification - Scan orchestrator coordinating signature + heuristic into unified ScanReport - Configurable depth: fast (signatures only), standard (sig + heuristic), thorough (sig + heuristic + emulated) - Batch processing with auto-quarantine for infected packages - YAML-based scan policy