Comments on: USBVirusScan

By: Jorge Renteria

Jorge Renteria — Wed, 03 Mar 2010 20:10:07 +0000

I have VirusScan Enterprise 8.7 and this is just what I’ve been looking for. Thank you very much.

By: Didier Stevens

Didier Stevens — Sat, 27 Feb 2010 10:52:13 +0000

@ganesh Just like on XP and Vista. Have you encountered a problem on 7?

By: ganesh

ganesh — Sat, 20 Feb 2010 20:47:49 +0000

Hi
This is nice Program but can you explain how use the program to windows7

By: Didier Stevens

Didier Stevens — Fri, 19 Feb 2010 16:28:59 +0000

I don’t know Blink. Search your manual for command line scanning, test it on a file and report the sytax here. Then I’ll see how to integrate it.

By: rmaloney

rmaloney — Fri, 19 Feb 2010 16:22:02 +0000

What is the command line argument when using Blink Antivirus?

By: Terry Cullen

Terry Cullen — Wed, 09 Dec 2009 16:08:59 +0000

Great software, bought my granddaughter a netbook for Christmas and put on Kaspersky IS for ultra portables. Unlike it bigger brother KIS 2010 there is no function for auto scanning external drives and cards but this did the trick and doesn’t need any user input. If anyone is using KIS 2009 or earlier here is my batch file :-

start USBVirusScan.exe -e c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.com SCAN /REMDRIVES /i3 /fa

The “start” at the beginning ensures that the CMD window closes after running (someone in an earlier post asked how to do this)
SCAN – tells avp what to do
/REMDRIVES – all removable dries and cards
/i3 – Treat infected objects and if disinfection fails, delete. Delete all compound objects completely if infected parts cannot be deleted.
/fa – Scan all files

There are different options, seach KIS help file for scan.com

By: Tim

Tim — Fri, 04 Dec 2009 17:46:29 +0000

Unless Symantec has added new features to their latest versions of Endpoint Protection, then no, calling VPScan.exe will NOT WORK! I spent a week trying to find a way to get SEP to work with USBVirusScan. Hence why in comment #121, my solution was to drop back down to the SAV line of products.

I would really love it though if someone would prove me wrong on this point!

By: Justin Baldwin

Justin Baldwin — Fri, 04 Dec 2009 15:29:57 +0000

For anyone using Symantec products (SAV … not sure about SEP) …

You can call a scan from the CMD-line of any drive you would like with VPScan.exe (http://service1.symantec.com/SUPPORT/ent-security.nsf/docid/2002100907421648).

I haven’t tried VPScan.exe with Didier’s aforementioned scripts, but have used VPScan.exe in VBS and BAT scripts I wrote and have deployed via Altiris. Works like a champ!! I found that prefacing the Scan (VPScan.exe) with a call to VPDN_LU.exe (Live Update) will bring your SAV client up to their latest / greatest virus defs and allow the VPScan.exe to get all them mean & nasty viruses.

By: Didier Stevens

Didier Stevens — Wed, 02 Dec 2009 21:30:54 +0000

Don’t know. But you see that USBVirusScan starts mpcmdrun.exe -scan E:
I believe you have to change your bat file like this:
START “IE” “C:\Program Files\USBVirusScan\USBVirusScan.exe” -d “C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware\mpcmdrun.exe” -scan %%c:

By: Lauren Tennent

Lauren Tennent — Wed, 02 Dec 2009 07:06:31 +0000

Sorry I had run the wrong batch file.
Here is the log results running the following command:

c:
cd “C:\Program Files\Microsoft Forefront\Client Security\Client\Antimalware”
START “IE” “C:\Program Files\USBVirusScan\USBVirusScan.exe” -d mpcmdrun.exe -scan %%c:

00000000 0.00000000 [3548] Drive E: inserted.
00000001 0.00000000 [3548] Volume name:
00000002 0.00000000 [3548] Serial number: 519A3CF1
00000003 0.00000000 [3548] Filesystem: FAT
00000004 0.00010996 [3548] mpcmdrun.exe -scan %c:
00000005 0.00021037 [3548] mpcmdrun.exe -scan E:

Using the mpcmdrun.exe -scan parameter without launching through usbvirusscan updates the signature files and then launches a full system scan. I wonder if it is failing because Forefront initially runs the signature file update?