how to configur the file scan with MSN?

Date of registration:
Jul 16th 2007

Monday, July 16th 2007, 7:22pm

I know how to make AV PE to scan with MSN.
But there is a problem, AV always scaned too much files.
how to make "Scan memory" ,"Scan boot sector", "Process scan" &"Scan registry" off?
Like single file scanning

MSN's scan configuration
Configuration settings for the scan:
Jobname..........................: unknown
Configuration file...............:
Logging..........................: low
Primary action...................: quarantine
Secondary action.................: delete
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: on
Scan registry....................: on

right click scan configuration
Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\J\LOCALS~1\Temp\952aab06.avp
Logging..........................: low
Primary action...................: quarantine
Secondary action.................: delete
Scan master boot sector..........: off
Scan boot sector.................: off
Scan memory......................: off
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

2

Tuesday, July 17th 2007, 9:39am

RE: how to configur the file scan with MSN?

Hello,

What command did you specify to MSN?

Best regards,
Radu

Radu Gheorghe
Avira GmbH

too9s

Date of registration:
Jul 16th 2007

3

Tuesday, July 17th 2007, 3:06pm

RE: how to configur the file scan with MSN?

My command:
"C:\Program Files\AntiVir PersonalEdition Classic\avscan.exe" /GUIMODE=3 /PATH=%FILE%

I want AV to just scan my received file, that can make scaning more sooner.

sorry my english maybe not good enough to describe what's I want :tongue:

THX a lot

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

4

Wednesday, July 18th 2007, 10:49am

RE: how to configur the file scan with MSN?

Hello,

You could do this by creating a configuration file and specify the following command in MSN Messenger:

"c:\Program Files\AntiVir PersonalEdition Classic\avscan.exe" /CFG="c:\profile.txt" /PATH=%file%

Where c:\profile.txt would contain the following lines:

[CFG]
GuiMode=3
ExitMode=3

[SEARCH]
Parameter=0x00000002
Parameter=0x00000020
Parameter=0x00000100
Parameter=0x00000400
Parameter=0x00010000
Parameter=0x00000080

[SCANNER]
BootsektorStart=0
Memory=0
ScanRootkits=0

This way avscan will only scan the running processes and the transferred file. No registry, no bootsectors, etc.

I hope this will work for you, but when I tested this MSN 7.5 stopped the transfer at "0 KB left"

There is also another option: scan with the command-line scanner (avcmd.exe). But I think this wouldn't be better because you always get a command prompt window and you need to press Enter to close it at the end of the scan.

You can specify an input file (for example, c:\input.txt that would contain only an Enter) so that you don't need to press Enter to close the command prompt window. So the command will look like this:

"c:\Program Files\AntiVir PersonalEdition Classic\avcmd.exe" -allfiles -noboot -nombr -e < c:\input.txt

But this didn't work either on MSN Messenger 7.5, so I would still have to press Enter. Maybe my test machine wasn't in a good mood today

Best regards,
Radu

Radu Gheorghe
Avira GmbH

too9s

Date of registration:
Jul 16th 2007

5

Wednesday, July 18th 2007, 8:02pm

RE: how to configur the file scan with MSN?

hahahaha I got it!
thx very very much~
It can run well at MSN 8.1.
there still has a question

How to stop scan the running process

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

6

Thursday, July 19th 2007, 9:34am

RE: how to configur the file scan with MSN?

Hello,

Do you mean avscan.exe remains loaded? This shouldn't happen because ExitMode=3 means "exit automatically".

Try modifying GuiMode from 3 to 1 (that would change the scanner from Invisible to Normal) and see what happens with the scan.

Best regards,
Radu

Radu Gheorghe
Avira GmbH

too9s

Date of registration:
Jul 16th 2007

7

Thursday, July 19th 2007, 11:16am

RE: how to configur the file scan with MSN?

no no, I want avscan only scan received file.
I tried your way and it works but it still scan "running process" ,that I don't want it to do.
How to fix profile.txt to turn it off?

this is part of scanning reprot
Configuration settings for the scan:
Jobname.................................................: unknown
Configuration file.................................: d:\antivir.txt
Logging..................................................: low
Primary action......................................: quarantine
Secondary action.................................: delete
Scan master boot sector...................: off
Scan boot sector................................: off
Scan memory......................................: off
Process scan.......................................: on<<<<how to turn it off????
Scan registry.......................................: off
Search for rootkits...........................: off
Scan all files......................................: Intelligent file selection
Scan archives.......................................: on
Recursion depth................................: 20
Smart extensions..............................: on
Deviating archive types..........: +BSD Mailbox, +Netscape/Mozilla Mailbox, +Eudora Mailbox, +Squid cache, +Pegasus Mailbox, +MS Outlook Mailbox,
Macro heuristic..................: on
File heuristic...................: medium

PS. your way had already make AV scaned files reduce, thx

This post has been edited 2 times, last edit by "too9s" (Jul 19th 2007, 11:29am)

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

8

Thursday, July 19th 2007, 11:25am

RE: how to configur the file scan with MSN?

Oh, now I see.

Well one of those parameters should have turned it off (0x00000020) but it doesn't in this order of parameters.

As far as I've tested, that's the best I could come up with. When I switched the order of parameters I could get process scanning off, but others would come up on (like registry scanning). Avscan wasn't designed to use so many parameters.

I would leave it like that because the process scan takes very little time and it's recommended to leave it on anyway.

Best regards,
Radu

Radu Gheorghe
Avira GmbH

too9s

Date of registration:
Jul 16th 2007

9

Thursday, July 19th 2007, 12:13pm

hmm, I see. thx for your recommendation.
The way already take very little time to scan

Nice job

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

10

Thursday, July 19th 2007, 12:29pm

You're welcome. I'm glad I could be of help

Best regards,
Radu

Radu Gheorghe
Avira GmbH

duz

Date of registration:
Jul 22nd 2007

11

Sunday, July 22nd 2007, 6:01pm

not info !!!

Hallo,
hoffentlich kann mir hier jemand helfen !!!
Ich bebutze WinAce 2.5 mit AntiVir PersonalEdition Classic 7 und Gigaget 1.0 als DL Manager.
Habe im WinAce folgende Befehle eingetragen : Pfad -> avscan.exe mit Parameter -> /GUIMODE=1 /PATH="%FILE%" -e
und bei Gigaget lautet das so : Pfad -> avscan.exe mit Parameter : /CFG="c:\ profil_winace.txt" /PATH=%FILE% -e
Die cfg datei ist mit :
[CFG]
GuiMode=3
ExitMode=3

[SEARCH]
Parameter=0x00000002
Parameter=0x00000020
Parameter=0x00000100
Parameter=0x00000400
Parameter=0x00010000
Parameter=0x00000080

[SCANNER]
BootsektorStart=0
Memory=0
ScanRootkits=0
geschrieben.

So nun zu meinen Problem, ich sehe leider keine Statusfenster oder eine Protokoldatei über den letzten scan. (betrifft beide programme).
woher weis ich dann ob der scan gelaufen ist ?
wer kann mir weiter helfen ???

danke mit besten grußen. duz

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

12

Monday, July 23rd 2007, 9:19am

RE: not info !!!

Hello Duz,

Please write in English here. If you prefer German, try the German side of the Forum here: http://forum.antivir-pe.de/board.php?boardid=4

Best regards,
Radu

Radu Gheorghe
Avira GmbH

fred_be9300

Date of registration:
Oct 21st 2007

Location: Belgium

13

Saturday, November 3rd 2007, 5:28pm

Scanning on download with Firefox Addon "download statusbar"

I've just used the information in this thread to configure the Firefox addon "Download Statusbar" to do an on-demand scan of downloaded files.

I thought I would just add a few ihmo important findings:

- when you're setting this up, first try it with guimode 1, exitmode 1. At least you'll get the reports easily visible and you can verify things. If you want it to autoclose later, or even be invisible, set exitmode 3 / guimode 3

- in Download Statusbar: arguments : /CFG="c:\users\fred\avira_fx.cfg" /PATH="%1

Note the "%1 (quotes not closed). If you use "%1" it will still work, although it passes C:\path\file\ into Avira instead of C:\path\file. The final backslash doesn't seem to harm, but I don't like it.

Note that just using %1 would not scan anything at all (or, more correctly, it would scan the config file) !!!

Also the quotes around the config file are strictly necessary

Clearly these are quirks of Download Statusbar, not Avira. But importantly, you wouldn't know if you have the scanning set up to be invisible (gui 3). There was no indication of anything being wrong. I just found out by downloading the eicar test files, which is another thing I'd recommend everyone to do as part of their set up.
http://www.eicar.org/anti_virus_test_file.htm

- I also found that the action to infected files, is the same as that configured for the on-demand scanning in the Antivir configuration panel. I have it set up for automatic quarantine (so as to not interrupt a full scan), although I would like this on-demand scanning from the browser to be interactive.

QUESTION
Does anyone know what to change in the config file for this scan's action on detected infection to be interactive?

Madcap

Date of registration:
Oct 31st 2007

Location: North Chicago, IL

14

Tuesday, November 6th 2007, 12:51pm

RE: Scanning on download with Firefox Addon "download statusbar"

I'm having a problem. I followed the directions here to the T. Pasted all your info into my SafeDownload and everytime it goes to scan I'm told it cannot find the profile.

Is there a way to figure out how the Context Menu "Scan this file" is setup like? It's exactly what we're all looking for yet I can find it no where on any files when I do File Types -> Advanced on a file. It's frustrating seeing the answer in my face but nothing is working as it should.

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

15

Wednesday, November 7th 2007, 4:59pm

RE: Scanning on download with Firefox Addon "download statusbar"

Quoted

QUESTION
Does anyone know what to change in the config file for this scan's action on detected infection to be interactive?

This depends on your Scanner configuration in AntiVir. Go to AntiVir -> Configuration -> Scanner, and set the action to Interactive.

@Madcap: you need to create a text file with the text indicated in my second reply. Then specify the path and name of that file in the /CFG= parameter

Best regards,
Radu

Radu Gheorghe
Avira GmbH

Madcap

Date of registration:
Oct 31st 2007

Location: North Chicago, IL

16

Wednesday, November 21st 2007, 2:15pm

Profile Command Not Working

Quoted

@Madcap: you need to create a text file with the text indicated in my second reply. Then specify the path and name of that file in the /CFG= parameter

First, forgive me for forum necromancy but the /CFG= doesn't work. No matter where it is, on straight C:\ and pasted your post straight into the file and my SafeDownload section. I get a "Couldn't find profile" despite I make sure it's the exact file. I guess I'll start putting some of my college into my home life and look to find a workable solution.

Thank you for the idea and hope of a /CFG command working so I'll work on getting the info into the arguments. Thanks for trying to help though Radu. You've got me started on both why the CFG command isn't working and putting time into looking for other command lines

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

17

Monday, November 26th 2007, 2:09pm

RE: Profile Command Not Working

This is strange. The /CFG option itself works.

Please tell me the name and version of your download software and the exact command specified so I can test this.

Best regards,
Radu

Radu Gheorghe
Avira GmbH

fred_be9300

Date of registration:
Oct 21st 2007

Location: Belgium

18

Tuesday, December 11th 2007, 9:33pm

RE: Scanning on download with Firefox Addon "download statusbar"

the solution that I described here above, didn't work on another computer...
It started working again when I managed to put double quotes around the values of /CFG and /PATH

weird, anyhow, I added a post about a new workaround: http://forum.avira.com/thread.php?threadid=30947

iamapigtoo

Date of registration:
Dec 25th 2007

Version: AntiVir Personal

19

Tuesday, December 25th 2007, 9:21pm

scan automatically on MSN 8.0

hello
I have a problem which is about scan the received files automatically with my msn 8.0 .
I've tried the methods above this series, but none of these work.
(I'm sure that I can figure out how to set those configurations.)
Is there anything else I can do to make it scan, except upgrade to 8.1?
The error message from msn : failed to scan the received files. check[tool]->[option], blah....

cheers,

iamapigtoo.

This post has been edited 1 times, last edit by "iamapigtoo" (Dec 25th 2007, 9:21pm)

Radu Gheorghe

Avira GmbH

Date of registration:
May 22nd 2006

Version: AntiVir Personal Unix/Linux

Location: Bucharest

20

Thursday, December 27th 2007, 1:34pm

RE: scan automatically on MSN 8.0

Hello and welcome,

Have you tried fred_be9300's solution (see the post above yours)? It seems to work for everybody, except for the fact that it will also scan running processes before scanning the file.

Best regards,
Radu

Radu Gheorghe
Avira GmbH

Avira Support Forum