Anti-Virus command lines for PowerArchiver!

[spwolf]

Hello Everyone!

this will be stickied thread for AV command lines for use in PowerArchiver. If you are using an antivirus that is not listed here, and you know the command line, please post it here and we will opdate this post.

Jackh's NOD32 info:

Optional virus scanner:
C:\Program Files\ESET\ESET NOD32 Antivirus\ecls.exe

Parameters:
--base-dir="C:\Program Files\ESET\ESET NOD32 Antivirus" --action=PROMPT

[NTFS]

Hope later you will use this information to implement "Auto-detection" of the installed antivirus software.

[moles42]

thanks Jack for that useful info.

[hoppy]

It may be a good idea to give the version of the AV program. I'm sticking with NOD32 v2.70.39, and there is no ecls.exe file as in Jackh's v3.x. Just a thought.

I use AVG7 in FlashGet but the same AV info plugged into PA does not work.

This thread is a good idea. I hope you get more participation.

[Claude Renaud]

I currently use TrendMicro Internet Security Pro. I don't know if it is possible to use the virus scanner in command line mode but I will look into it...

[drteeth]

Originally Posted by Claude Renaud

I currently use TrendMicro Internet Security Pro. I don't know if it is possible to use the virus scanner in command line mode but I will look into it...

Same here wrt Kaspersky AV 2009. However, as the resident module of AV software does what it says on the tin, I have never understood the need for extra mail scanning for example as files are scanned as they are read.

Cheers

DrT

[Sir Richard]

The PA team and Alpha testers have been talking about auto antivirus detection for some time! I still think it would be a welcomed feature and is something other archive programs dont have.

[moles42]

agreed Richard...I'd be very much in favour of it.

[nameless]

I use AntiVir Premium, which is a great real-time AV but the command line support is practically nonexistent. There is a stupid AntiVir command line utility that can be downloaded separately, but when it's used, the command window closes before you can even tell what happened. (I've written batch files in the past to accommodate this, but I'm sick of using kludges.)

[Karl2]

Originally Posted by spwolf

Hello Everyone!

this will be stickied thread for AV command lines for use in PowerArchiver. If you are using an antivirus that is not listed here, and you know the command line, please post it here and we will opdate this post.

Jackh's NOD32 info:

How to setup parameters for AVG8.5 antivirus?
How to pause command window after running of test?
Is it possible to start command window as cmd.exe /k ?

C:\Program Files (x86)\AVG\AVG8>avgscana.exe /?
AVG 8.5 Anti-Virus command line scanner
Copyright (c) 1992 - 2009 AVG Technologies
/SCAN Scan /for example SCAN=path;path/
/COMP Scan whole computer
/HEUR Use heuristic analysis
/EXCLUDE Exclude path or files from scan
/@ Command file /file name/
/EXT Scan these extensions /for example EXT=EXE,DLL/
/NOEXT Do not scan these extensions /for example NOEXT=JPG/
/ARC Scan archives
/CLEAN Clean automatically
/TRASH Move infected files to the Virus Vault
/QT Quick test
/MACROW Report macros
/PWDW Report password-protected files
/ARCBOMBSW Report archive bombs (repeatedly compressed archives)
/IGNLOCKED Ignore locked files
/REPORT Report to file /file name/
/REPAPPEND Append to the report file
/REPOK Report uninfected files as OK
/NOBREAK Do not allow CTRL-BREAK to abort
/BOOT Enable MBR/BOOT check
/PROC Scan active processes
/PUP Report "Potentially unwanted programs"
/REG Scan registry
/COO Scan for Tracking Cookies
/? Display help on this topic
/HELP Display help on this topic
/PRIORITY Set scan priority /Low, Auto, High/
/SHUTDOWN Shutdown computer upon scan completion
/FORCESHUTDOWN Force computer shutdown upon scan completion
/ADS Scan Alternate Data Streams (NTFS only)

[fiery]

Avira Premium/Free 8/9:

Scanner:
C:\Program Files\Avira\AntiVir Desktop\avscan.exe

Parameters:
/CFG="C:\Program Files\Avira\filescan.avp" /PATH=%FILE%

Where %FILE% must be an option to pass a file with path. *.* doesn't work.

File filescan.avp should be:

[CFG]
GuiMode=1
ExitMode=3

[SEARCH]
Parameter=0x00300432

[CONTROLCENTER]
ProfileName=ShlExt

[SCANNER]

[drteeth]

Can anybody tell be what the point is of this idea? All files should be automatically checked by default NOW by the AV programs on the market.

DrT

[Sir Richard]

Originally Posted by drteeth

Can anybody tell be what the point is of this idea? All files should be automatically checked by default NOW by the AV programs on the market.

DrT

Good Question.. The reason is very simple it is an additional layer of security.

Many Antivirus do Check Zip, rar and bin files but this isn’t a guaranteed level of security. In order to fully verify there is a threat you must open the Archive 1st and this is where PowerArchiver's Security comes in to play.

This is why it is so appealing to users and Admin if PA were to automatically detect your Antivirus & Spyware software and it was to Integrate it so every Archive were checked in depth within a "sandbox environment" it would be a very powerful method of protection.

[spwolf]

Originally Posted by drteeth

Can anybody tell be what the point is of this idea? All files should be automatically checked by default NOW by the AV programs on the market.

DrT

i would guess it is mostly for users who do not have AV working at all times, and they just want on-demand scan.

[drteeth]

Originally Posted by Sir Richard

In order to fully verify there is a threat you must open the Archive 1st...
[/font]

This happens anyway. The contents get written to a temp location and file writing is scanned by the real-time scanner.

I have never found any convincing argument for email scanners for the same reason. Any operation on the attachment with give the real time scanner an opportunity to inspect it.

Regards

DrT

[spwolf]

Originally Posted by drteeth

This happens anyway. The contents get written to a temp location and file writing is scanned by the real-time scanner.

I have never found any convincing argument for email scanners for the same reason. Any operation on the attachment with give the real time scanner an opportunity to inspect it.

Regards

DrT

if you have active AV indeed.

a lot of people do not... including myself. Because it slows down my system to the crawl, despite having core 2 duo at 2.5 GHz

[Sir Richard]

Hense why it can be seen as an additional layer of security

[drteeth]

Originally Posted by Sir Richard

Hense why it can be seen as an additional layer of security

...as indeed can finding an AV product that does NOT slow down one's machine to a crawl...something I confess that I have not seen in recent years in testing several products on my test bed at sub renewal time .

DrT