SCAN.EXE - McAfee AntiVirus Software
JohnNews
You will need to maximize your browser window to see the results of this
virus scan properly
I have McAfee AntiVirus software (Version 6.02.3000.1) installed on my Lap
Top. I have been experimenting with writing a DOS script to run and
generate an HTML report to be mailed to me at
6:00 am so that I can read same on the train on my way to work. I am
investigating the possibility of running this script in parallel on a bunch
of network computers and have only report summaries sent to be via email.
The basic syntax of the script is SCAN.EXE /OPTION1 /OPTION2 /OPTION3 ...
/OPTIONn
Here are some of the issues that arise after studying the entire report:
* I would love know if others have investigated a similar task or do you
think this is all just a waste of time ?
* How come I am using "Scan engine v4.2.60 for Win32", I thought I had
McAfee AntiVirus software (Version 6.02.3000.1) installed on my machine ?
* The # of SWITCHES used in basic SCAN command is huge. Is there a more
efficient choice to accomplish basically the same goals ?
* How to solve these problems: "File could not be opened", "File is
password protected" ?
* Is there a way to speed up running time of this script ?
* Feel free to raise any other issues that you think would be
relevant/beneficial to members of this newsgroup
Thanks,
John.
Virus Scan Report File
----------------------------------------------------------------------------
----
Virus Scan Information
----------------------------------------------------------------------------
----
McAfee VirusScan for Win32 v4.26.0
Copyright (c) 1992-2003 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832 LICENSED COPY - May 16 2003
Scan engine v4.2.60 for Win32.
Virus data file v4314 created Jan 14 2004
Scanning for 84549 viruses, trojans and variants.
----------------------------------------------------------------------------
----
Virus Scan Results
----------------------------------------------------------------------------
----
01/15/2004 13:33:29
Options:
/ALL /AD /ADN /ANALYZE /CLEAN /APPEND /UNZIP /SUB /MANALYZE /MIME /MAILBOX
/PROGRAM /CONTACTFILE SCANCONTACT1.TXT /HTML HTMLREPORT1 /REPORT
SCANREPORT1.TXT /RPTCOR /RPTERR
Scanning C: []
Scanning C:\*.*
C:\1 John Data Backup\Download Apps\isa presentation.exe\SETUP.MSI ... is
corrupted.
C:\1 John Data Backup\Download Apps\PMG -Toolkit2_4.exe\TOOLKIT.CAB ... is
password-protected.
C:\1 John Data Backup\Download Apps\PMG -Toolkit2_4.exe\SETUP.LST ... is
password-protected.
C:\1 John Data Backup\Download Apps\PMG -Toolkit2_4.exe\SETUP.EXE ... is
password-protected.
C:\1 John Data Backup\ISA 2000 Server Materials\isa
presentation.exe\SETUP.MSI ... is corrupted.
C:\1 John Data Backup\PMG Visio Stencil.zip\PMG DOCUNET STENCIL.VSS ... is
password-protected.
C:\1 John Data Backup\PMG whitepaper 1.zip\WP_PARADIGMS2002.PDF ... is
password-protected.
C:\1 John Data Backup\PMG whitepaper_response 2.zip\RESPONSE.PDF ... is
password-protected.
C:\1 John Data Backup\PMG_docunet sample-2003.zip\PMG_DOCUNET
SAMPLE-2003.VSD ... is password-protected.
C:\1 John Data Backup\Visual Basic Issues\Text Book - Hands On - VB6 For Web
Development\WinZip\SETUP.WZ\WINZIP32.EX_ ... is password-protected.
C:\1 John Data Backup\Visual Basic Issues\Text Book - Hands On - VB6 For Web
Development\WinZip\winzip95.exe\SETUP.WZ\WINZIP32.EX_ ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\AlexaRelated.zip\RELATED.HTM ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite1.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite10.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite11.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite12.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite13.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite14.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite15.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite16.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite17.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite18.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite19.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite2.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite20.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite21.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite22.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite23.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite24.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite25.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite26.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite27.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite28.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite29.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite3.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite30.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite31.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite32.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite33.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite34.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite35.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite36.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite37.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite38.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite39.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite4.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite40.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite41.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite42.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite43.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite44.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite45.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite46.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite47.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite48.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite49.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite5.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite50.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite51.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite52.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite53.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite54.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite55.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite56.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite57.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite58.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite59.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite6.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite60.zip\BACKWEB-8876480.EXE ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite61.zip\BACKWEB-8876480.EXE ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite7.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite8.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\BackWeblite9.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DoubleClick.zip\JOHN@DOUBLECLICK[1].TXT ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit1.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit2.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit3.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit4.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\DSOExploit5.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar.zip\EBAYTBAR.EXE ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar1.zip\EBAYHTML.DLL ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar2.zip\EBAYBAND.DLL ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar3.zip\EBAYBAND.DLL ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar4.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar5.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar6.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\eBayToolbar7.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator.zip\GSTARTUP.LNK ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator1.zip\SBRECOVERY.REG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator2.zip\GATORPLUGIN.LOG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator3.zip\DATE MANAGER WEBSITE.LNK ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator4.zip\PRECISIONTIME.LNK ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator5.zip\ABOUT GAIN.LNK ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\Gator6.zip\GATORPDPSETUP.LOG ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\HitsLink.zip\JO...@COUNTER.HITSLINK[1].TXT ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\HitsLink1.zip\JO...@COUNTER.HITSLINK[1].TXT ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\HitsLink2.zip\JO...@COUNTER.HITSLINK[2].TXT ... is
password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\IPinsight.zip\IPINSIGT.DLL ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\VXf.zip\MSVIEW.DLL ... is password-protected.
C:\Documents and Settings\All Users\Application Data\Spybot - Search &
Destroy\Recovery\WhenUClockSync.zip\CLOCKSYNC.LNK ... is password-protected.
C:\Documents and Settings\John\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat ... file could not be opened.
C:\Documents and Settings\John\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG ... file could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\Perflib_Perfdata_d8.dat
... file could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DF5640.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DF603F.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DF6095.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DF60FA.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DFA980.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DFB1D4.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temp\~DFB203.tmp ... file
could not be opened.
C:\Documents and Settings\John\Local Settings\Temporary Internet
Files\Content.IE5\61H0MV9A\wbk21C.tmp ... Found application
Exploit-MIME.gen.c.
The file has been deleted.
C:\Documents and Settings\John\ntuser.dat ... file could not be opened.
C:\Documents and Settings\John\ntuser.dat.LOG ... file could not be opened.
C:\Documents and Settings\LocalService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat ... file could not be opened.
C:\Documents and Settings\LocalService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG ... file could not be opened.
C:\Documents and Settings\LocalService\ntuser.dat ... file could not be
opened.
C:\Documents and Settings\LocalService\ntuser.dat.LOG ... file could not be
opened.
C:\Documents and Settings\NetworkService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat ... file could not be opened.
C:\Documents and Settings\NetworkService\Local Settings\Application
Data\Microsoft\Windows\UsrClass.dat.LOG ... file could not be opened.
C:\Documents and Settings\NetworkService\ntuser.dat ... file could not be
opened.
C:\Documents and Settings\NetworkService\ntuser.dat.LOG ... file could not
be opened.
C:\pagefile.sys ... file could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\master.mdf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\mastlog.ldf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\model.mdf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\modellog.ldf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\msdbdata.mdf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\msdblog.ldf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\tempdb.mdf ... file
could not be opened.
C:\Program Files\Microsoft SQL Server\data\MSSQL\Data\templog.ldf ... file
could not be opened.
C:\psexec.exe\00012438.EXE ... Found application RemoteProcessLaunch.
C:\Scripting - Landes\psexec.exe\00012438.EXE ... Found application
RemoteProcessLaunch.
C:\Scripting - Landes\psexec.zip\PSEXEC.EXE\00012438.EXE ... Found
application RemoteProcessLaunch.
File not renamed - could be archive or compound file.
C:\Scripting - Landes\psTOOLS\psexec.exe\00012438.EXE ... Found application
RemoteProcessLaunch.
C:\Scripting - Landes\psTOOLS\pskill.exe ... Found application PSKill.
The file has been renamed.
C:\Scripting - Landes\Pstools.zip\PSKILL.EXE ... Found application PSKill.
C:\Scripting - Landes\Pstools.zip\PSEXEC.EXE\00012438.EXE ... Found
application RemoteProcessLaunch.
C:\WINDOWS\$NtUninstallQ307274$\shgina.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ307274$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ307274$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308131$\migrate.js ... file could not be opened.
C:\WINDOWS\$NtUninstallQ308131$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308131$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308402$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308402$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308402$\srrstr.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ308677$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308677$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ308677$\userenv.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ309521$\dxmasf.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ309521$\lsasrv.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ309521$\msdxm.ocx ... file could not be opened.
C:\WINDOWS\$NtUninstallQ309521$\sfcfiles.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ309521$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ309521$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ310601$\mstask.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ310601$\mstinit.exe ... file could not be opened.
C:\WINDOWS\$NtUninstallQ310601$\schedsvc.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ310601$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ310601$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ310601$\srsvc.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ311345$\msobmain.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ311345$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311345$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311455$\shell32.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ311455$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311455$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311785$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311785$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311785$\w32time.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ311889$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311889$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ311889$\termsrv.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ312368$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ312368$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ312368$\syssetup.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ312370$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ312370$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ312370$\usbhub.sys ... file could not be opened.
C:\WINDOWS\$NtUninstallQ312370$\usbport.sys ... file could not be opened.
C:\WINDOWS\$NtUninstallQ314412$\msgina.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ314412$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ314412$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ314862$\qmgr.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ314862$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ314862$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ315000$\netsetup.exe ... file could not be opened.
C:\WINDOWS\$NtUninstallQ315000$\spuninst\spuninst.exe ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ315000$\spuninst\spuninst.inf ... file could not be
opened.
C:\WINDOWS\$NtUninstallQ315000$\ssdpapi.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ315000$\ssdpsrv.dll ... file could not be opened.
C:\WINDOWS\$NtUninstallQ315000$\upnp.dll ... file could not be opened.
C:\WINDOWS\system32\config\default ... file could not be opened.
C:\WINDOWS\system32\config\default.LOG ... file could not be opened.
C:\WINDOWS\system32\config\SAM ... file could not be opened.
C:\WINDOWS\system32\config\SAM.LOG ... file could not be opened.
C:\WINDOWS\system32\config\SECURITY ... file could not be opened.
C:\WINDOWS\system32\config\SECURITY.LOG ... file could not be opened.
C:\WINDOWS\system32\config\software ... file could not be opened.
C:\WINDOWS\system32\config\software.LOG ... file could not be opened.
C:\WINDOWS\system32\config\system ... file could not be opened.
C:\WINDOWS\system32\config\system.LOG ... file could not be opened.
C:\WINDOWS\Temp\JET2672.tmp ... file could not be opened.
C:\WINDOWS\Temp\Perflib_Perfdata_2a0.dat ... file could not be opened.
C:\WINDOWS\Temp\Perflib_Perfdata_63c.dat ... file could not be opened.
C:\WINDOWS\Temp\WebPoolFileFile ... file could not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msoe.hlp ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msoe50.inf ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msoe.txt ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\aleabanr.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\amaizrul.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\anabnr2.gif ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\aswrule.gif ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\blank.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\blankbkg.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\btzhsepa.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\citbanna.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\citrbkg.gif ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\citrpun.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\clearday.htm ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\clrdaybg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\fieruld.gif ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\fiesta.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\fiestabg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\glacier.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\glacrbkg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\ivy.gif ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\ivy.htm ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\leaves.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\leavesbg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\maize.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\maizebkg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\nature.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\naturebg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\netblitz.htm ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\netblzbg.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\piechtbg.jpg ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\piechts.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\sunbanna.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\sunfbkg.jpg ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\sunflowr.htm ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\sweets.htm ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\sweetsbg.gif ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\tech.gif ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\tech.htm ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msoe.dll ... file could not be
opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\oemig50.exe ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\oeimport.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\setup50.exe ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msimn.exe ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\inetcomm.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\mapistub.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\msoeres.dll ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\inetres.dll ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\csapi3t1.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\oemiglib.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\fixmapi.exe ... file could not
be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\directdb.dll ... file could
not be opened.
C:\workssetup\MSWORKS\REDIST\IE6\TEMPFILE.CAB\9xmig.dll ... file could not
be opened.
Summary report on C:\*.*
File(s)
Total files: ........... 639680
Clean: ................. 639427
Possibly Infected: ..... 0
Cleaned: ............... 0
Deleted: ............... 1
Non-critical Error(s): 3
Master Boot Record(s): ......... 1
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Time: 02:25.46
----------------------------------------------------------------------------
----
Visit the Network Associates Online Web Site
Need some help or advice? Send email to Technical Support.
David H. Lipman
Dave
"JohnNews" <johnc...@comcast.net> wrote in message
news:ObuuIc82...@TK2MSFTNGP10.phx.gbl...
| Folks:
|
|
| You will need to maximize your browser window to see the results of this
| virus scan properly
|
| I have McAfee AntiVirus software (Version 6.02.3000.1) installed on my Lap
| Top. I have been experimenting with writing a DOS script to run and
| generate an HTML report to be mailed to me at
| 6:00 am so that I can read same on the train on my way to work. I am
| investigating the possibility of running this script in parallel on a bunch
| of network computers and have only report summaries sent to be via email.
If this is a corporate LAN, you are using the wrong product. v6.x is a retail product and
you should be using v4.5.1 SP1 corporate or v7.1 Enterprise. What you should be doing is
having Alert Manager receive alerts and send selected personnel NetBIOS pop-ups upon
detection or certain errors. Alert Manager is a built in product in Netshield (NT Server or
Netware) or a separate product used with v7.1 enterprise. there is no reason to receive a
daily scan report for each PC. What is important is that events are logged and support
personnel are notified on a event.
| The basic syntax of the script is SCAN.EXE /OPTION1 /OPTION2 /OPTION3 ...
| /OPTIONn
|
| Here are some of the issues that arise after studying the entire report:
|
| * I would love know if others have investigated a similar task or do you
| think this is all just a waste of time ?
I do what you are doing all the time. not a waste. Only it is done for remediation and
rarely detection.
| * How come I am using "Scan engine v4.2.60 for Win32", I thought I had
| McAfee AntiVirus software (Version 6.02.3000.1) installed on my machine ?
There are three parts to McAfee: Kernel, ENGINE and DAT.
The product you are using is the Kernel - Version 6.02.3000.1
The ENGINE is v4260 (ENGINE v4320 was just released last week)
The DAT is v4314
You are using not the GUI but the McAfee Command Line Scanner. There are three versions;
SCAN.EXE, SCANPM.EXE and SCAN86.EXE. SCAN.EXE is a mixed DOS/Win32 program.
| * The # of SWITCHES used in basic SCAN command is huge. Is there a more
| efficient choice to accomplish basically the same goals ?
You don't need the following
/RPTCOR
/MAILBOX
/RPTERR
/CONTACTFILE SCANCONTACT1.TXT
/REPORT SCANREPORT1.TXT you already are creating a HTML report, /HTML HTMLREPORT1 I
suggest redoing as.../HTML "HTMLREPORT1.HTML"
Replace; /AD /ADN with /ADL
| * How to solve these problems: "File could not be opened", "File is
| password protected" ?
You can't. You can't scan password protected files or files w/Open File Handles.
| * Is there a way to speed up running time of this script ?
Remove extraneous switches otherwise, no you can't speed up the process w/o a faster CPU.
| * Feel free to raise any other issues that you think would be
| relevant/beneficial to members of this newsgroup.
I use the following command...
SCAN.EXE /ADL /program /sub /mime /unzip /clean /del /html "C:\ScanReport.HTML"
JohnNews
Thanks for investing so much of your time and for an excellent response to
the issue I raised. I am sure that you must enjoy what you do. I surely
do. I have learned a lot from your extensive insight on this subject.
A little over 1 year ago I discovered that a solid grasp of SCRIPTING can
significantly enhance the capabilities of any network Manager/Administrator.
Since then I have an obsession with scripting a wide range of networking
tasks.
Thanks,
John.
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:udovXg92...@tk2msftngp13.phx.gbl...
David H. Lipman
You are welcome.
Since you have been bitten by the Scripting Bug -- let me suggest to you an excellent
scripting language to be used for a Login Script Interpreter or for any general scripting
purposes under Win32 and it Reads/Writes to the Registry.
The interpreter is Kixtart, http://kixtart.org/ Kixtart is CareWare.
On my NT LAN I do everything from the Kix NT Login Script. One major factor is for updating
McAfee workstations and for McAfee Configuration Management.
Dave
"JohnNews" <johnc...@comcast.net> wrote in message
news:OKm$v392DH...@TK2MSFTNGP10.phx.gbl...
JohnNews
Thanks for the Kixtart tip. I know OF this program but I have never
actually used it.
I have two quick questions about McAfee AntiVirus's SCAN.EXE:
* Could you please explain what you mean by "... done for remediation
and rarely detection"
* My McAfee Antivirus application is installed in C:\Program
Files\McAfee\McAfee VirusScan\*.*
But SCAN.EXE is located in C:\Program Files\Common Files\Network
Associates\VirusScan Engine\4.0.xx\*.*
The only executable that runs at the command prompt is SCAN.EXE
located in the "VirusScan Engine" folder.
Is there any obvious reason for this structure/arrangement. Or is it
that Software Architects get to make any (arbitrary) type of decision.
The program that I am working on now is to use the DEFRAG utility that is
built into the Windows Operating System. Defragmenting hard drives across a
small network is providing a tiny bit of resistance. I am actually using
PSexec.exe to help with the remote aspects of the task.
* My biggest scripting project is an Event Viewer project. Here I grab:
security, system, and application events (for all machines on my network)
using DUMPEL.EXE. Then I search this text-delimited
file for certain specific events. I like to run this routine at 6: 00
am every day so that by the time I arrive at work I have a report to check
out. Here I am looking for a better format for my end reports -
probably HTML. But converting from delimited text to HTML is some what
problematic.
* NET VIEW is my favorite command. is allows me to grab a CLEAN list of
all computers in my network. I can then perform (in theory, at least) a
wide variety of scripting tasks on all network
machines using the FOR ...IN ... DO clause.
There are other Scripting Network Management tasks that I am considering but
I will stop here for now.
My goal in all this is to master the command line interface and to create &
deploy tools to manage computers and networks.
Thanks again,
John.
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:uL3niF%232DH...@TK2MSFTNGP12.phx.gbl...
JohnNews
Based on the information you provided previously about the THREE components
of McAfee Antivirus structure; I took the ENGINE found in
(...virusScan\engine\4.0.xx\*.*) folder and copied it to another machine on
my home network. I then ran the usual command: "SCAN.EXE /adl /program
/mime /unzip /clean /del /html "c:\scanReport.html". This command worked
well but took 2 hours on a 6 GB harddrive & a 500 MHz machine and scanned a
total of 91,695 files.
* What do you think about this and have you ever tried moving the McAfee
Engine folder to any machine for local running?
* Is this illegal to do from McAfee perspective ? My copy of mcAfee
AntiVirus includes the following information in a typical antiVirus scan
report - "Copyright (c) 1992-2003 Networks Associates Technology
Inc. All rights reserved"
* Is there a way to use DOS to go out to the Internet and grab the latest
virus update definition files; or would I have to continue copying the
the contents of (...virusScan\engine\4.0.xx) from its original
location where updating occurs automatically ?
* I am planning to purchase McAfee AntiVirus 8.0 Enterprise to do more
EFFICIENT virus scanning & firewalling. Are there any significant
benefits to be derived from upgrading from from McAfee AntiVirus 6.02
to 8.0.
Look forward to the usual rich exchange. Unfortunate that no one else seems
interested.
Thanks,
John
"David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message
news:e56PeWJ...@TK2MSFTNGP11.phx.gbl...
> First a statement:
> If you post to UseNet with your TRUE, not a munged, email address then you
have invited the
> Swen Internet worm [aka; W32/Gibe-F] to visit you.
>
> The Swen is news spelled backwards. The reason it is called this is
because the Swen worm
> harvests email addresses from UseNet News Groups. It has an engine that
allows it to post
> itself to UseNet News Groups and well as it has its own email engine.
From the list of
> email addresses that it has harvested, it will then email itself to those
addresses.
>
> Replies are inline...
>
>
> "JohnNews" <johnc...@comcast.net> wrote in message
> news:%23VGNT6I...@TK2MSFTNGP10.phx.gbl...
> | Dave:
> |
> |
> | Thanks for the Kixtart tip. I know OF this program but I have never
> | actually used it.
> |
> | I have two quick questions about McAfee AntiVirus's SCAN.EXE:
> |
> | * Could you please explain what you mean by "... done for
remediation
> | and rarely detection"
>
>
> Anti Virus software works in two basic modes -
> On Access - When a file is written to or read from media the media and the
file is scanned
> for viruses
> On Demand - This is when you tell the software to perform a scan. This
could via a
> scheduler like MS Tasker or the one built-into the AV product.
>
> McAfee Commnad Line Scanner (McAfee CMS) is a On Demand scanner. Thus, if
there is a
> certain type of virus that is hard to eliminate either in Safe Mode or by
using the GUI, you
> may need the McAfee CMS to clean/delete (read remediate). Sometimes I may
use the McAfee
> CMS as an alternate scanner thus "rarely detection."
>
>
> | * My McAfee Antivirus application is installed in C:\Program
> | Files\McAfee\McAfee VirusScan\*.*
> | But SCAN.EXE is located in C:\Program Files\Common
Files\Network
> | Associates\VirusScan Engine\4.0.xx\*.*
> | The only executable that runs at the command prompt is
SCAN.EXE
> | located in the "VirusScan Engine" folder.
> | Is there any obvious reason for this structure/arrangement. Or is
it
> | that Software Architects get to make any (arbitrary) type of decision.
>
>
> I have NOT figured out why different products use a different path
structure.
> For example the ENGINE directory for Netshield v4.5.0 and VirusScan v4.5.1
corporate use...
> C:\Program Files\Common Files\Network Associates\VirusScan Engine\4.0.xx
> while VirusScan Enterprise v7.1 uses...
> C:\Program Files\Common Files\Network Associates\Engine
>
> The actual program can be in...
> C:\Program Files\Network Associates\VirusScan
> or
> C:\Program Files\McAfee\VirusScan
>
>
> When I support McAfee users in UseNet w/different people is is difficult
to to ascertain
> where the ENGINE directory is. I have to ask them to search for SCAN.EXE.
In previous
> versions the ENGINE directory was inserted into the path such that you
just have to enter
> scan and switch parameters. Newer versions don't add the ENGINE
direrectory to the path so
> a fully qualified command such as below has to be used...
> "C:\Program Files\Common Files\Network Associates\VirusScan
Engine\4.0.xx\scan.exe" /adl
> /clean /delete etc....
> It is even harder to do it in 8.3 notation...c:\progra~1\networ~1 you get
the idea.
>
> I haven't figured out yet what to do with NTFS partitions but for FAT32
partitions that are
> infected...
> I disconnect the PC from the LAN
> I boot off a floppy disk and using Iomega software the AUTOEXEC.BAT batch
file creates a
> drive letter for either an internal ZIP drive or an external parallel port
ZIP dive and I
> have the McAfee CMS run from the ZIP disk and scan & clean/delete
infectors found. A HTML
> report is generated on the ZIP disk. My "corporation" requires logging
all AV events.
> Therefore I keep the HTML reports for future needs.
>
> I tried NTFSDOS to scan NTFS partitions but the memory management in the
McAfee CMS is
> incompatible with NTFSDOS.
>
> On an additional note, as an alternate to using the McAfee CMS is to use
the Win32 GUI. The
> retail versions and VirusScan v4.5.1 interpret an ASCII directive file. I
have attached an
> example VSC file. In my "corporation" we are required to scan the PC
every business day. I
> use the MS Tasker ( %windir%\tasks ) and create a JOB that executes at
1145hrs (when the
> vast majority have gobe to lunch) that uses a VSC file. If I want to
change the way the
> 1145scan performs, I just push (via the Kixtart login Script) a new
version of the VSC file
> to the workstation. Once you understand the directives used in the VSC
file, editing the
> Registry is a snap. The caveat is that modifications to the
> HKEY_LOCAL_MACHINE\SOFTWARE\Network Associates area of the Registry (and
others as well)
> won't stick unless the software is disabled. On NT platforms this is
easily done by a
> script command such as...
> net stop avsynmgr
>
> Dave
>
>
>
>
thomas.mi...@yahoo.com
I think you guys should check out http://www.opswat.com/ there are 2 or 3 products that may be a match, I think that OESIS Framework at http://www.opswat.com/products/oesis-framework provides a single interface to many antivirus and McAfee is in that list. Another option is I think Metascan at http://www.opswat.com/products/metascan which is more for ISV, I also found that McAfee is certified by OPSWAT at http://www.opswat.com/certified
I hope this helps.
Regards,
Tom