On demand scanner for NT4 and command line

[Oliver Betz]

Hello All,

still using F-Prot 3.16f, I'm afraid that we will not renew the
license this year. F-Prot 3 missed two worms in the last weeks, and
F-Prot 6 doesn't support NT4 which is still used on some old systems
here. What a pity, also the volume pricing of F-Prot was very
attractive (<USD5 per computer).

I don't want any "on access" or Winsock hijacking scanners. I would
prefer a very basic "on demand" scanner with no frills. And I need a
command line interface because I want to integrate the scanner for
example in Pegasus Mail.

F-Prot/Win (with fpcmd) and ClamAV (with clamscan) look like what I
want, but they don't catch enough malware. In addition, clamscan is
sloooow.

NOD32 seemed to be interesting but I can't get around some severe
limitations.

Any recommendations or warnings before I try the next candidate?

TIA,

Oliver

 

[Pete]

We use NOD32 for NT4.0 and it works well.

 

[David H. Lipman]

From: "Oliver Betz" <[email protected]>

| Hello All,
|
| still using F-Prot 3.16f, I'm afraid that we will not renew the
| license this year. F-Prot 3 missed two worms in the last weeks, and
| F-Prot 6 doesn't support NT4 which is still used on some old systems
| here. What a pity, also the volume pricing of F-Prot was very
| attractive (<USD5 per computer).
|
| I don't want any "on access" or Winsock hijacking scanners. I would
| prefer a very basic "on demand" scanner with no frills. And I need a
| command line interface because I want to integrate the scanner for
| example in Pegasus Mail.
|
| F-Prot/Win (with fpcmd) and ClamAV (with clamscan) look like what I
| want, but they don't catch enough malware. In addition, clamscan is
| sloooow.
|
| NOD32 seemed to be interesting but I can't get around some severe
| limitations.
|
| Any recommendations or warnings before I try the next candidate?
|
| TIA,
|
| Oliver


Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm

Additional Instructions:
http://pcdid.com/Multi_AV.htm


* * * Please report back your results * * *

 

[Oliver Betz]

Download MULTI_AV.EXE from the URL --

Nice thing for a emergency disk, for example using BartPE. Thanks for
the link!

O.k. - what I see there are four antivirus products with the
possibility of a "simple" (unchecked) download (not so important for
me) and a command line component. I only had a quick look at them but
will check them further.

Can it be that the kavdos32 engine is from 2001?

McAffee is a resource hog, isn't it?

I don't know anything about the quality of Trend. Comments?

I will ask Sophos for a quote tomorrow. There are no price lists
available online?

Oliver

 

[Oliver Betz]

We use NOD32 for NT4.0 and it works well.

NT4 was not the problem I had with NOD32.

Oliver

 

[David H. Lipman]

From: "Oliver Betz" <[email protected]>

| "David H. Lipman" wrote:
||
| Nice thing for a emergency disk, for example using BartPE. Thanks for
| the link!
|
| O.k. - what I see there are four antivirus products with the
| possibility of a "simple" (unchecked) download (not so important for
| me) and a command line component. I only had a quick look at them but
| will check them further.
|
| Can it be that the kavdos32 engine is from 2001?
|
| McAffee is a resource hog, isn't it?
|
| I don't know anything about the quality of Trend. Comments?
|
| I will ask Sophos for a quote tomorrow. There are no price lists
| available online?
|
| Oliver

No. McAfee is not a resource hog. It is a On Demand Comand Line Scanner and ONLY uses
enough RAM to perform a scan when you demand it.

The Multi AV Scanning Tool provides to mans to download all needed components. No purchases
needed.

Plaese read the included PDF Help File.

 

[Oliver Betz]

:

[...]

The Multi AV Scanning Tool provides to mans to download all needed components.

I understood this. As I wrote: "Nice thing".

No purchases needed.

....to get them. I need a solution for continuous _use_ in an
commercial environment.

Nevertheless the kavdos32 3.0 engine seems to be outdated. Do you know
whether it has the samedetection capabilities as the current versions?

Plaese read the included PDF Help File.

Did this before reading/doing anything other.

Oliver

 

[David H. Lipman]

From: "Oliver Betz" <[email protected]>

| "David H. Lipman" wrote:
|
| [...]
||
| I understood this. As I wrote: "Nice thing".
||
| ...to get them. I need a solution for continuous _use_ in an
| commercial environment.
|
| Nevertheless the kavdos32 3.0 engine seems to be outdated. Do you know
| whether it has the samedetection capabilities as the current versions?
||
| Did this before reading/doing anything other.
|
| Oliver

KAVDOS is old but does find 95% of what Kaspersky signatures detect. You have the other
scanners as well so between all four there is ample, broad-spectrum, coverage.

Multi AV is conuous. Each module will check to see if it has the latest engine and
signatures. Only Kaspersky will use and older engine with new signatures.