CSAV experts please...

[Karl_Menshy]

Hi all, I need help from one of the command antivirus experts in here, please.

I am trying to set up CSAV. By default the on access scanner scans certain predefined and 'hardcoded' extensions. You can change the file extensions to be included in an on demand scan, but this seems to not affect the on access component. Can anybody verify this?

E.g. 'eicar.com' is detected, 'eicar.xxx' is not.

I know that renamed malware is no immediate risk, however I would like to adjust file extension list to my needs. Any advice?

I contacted Command UK about this, but the replies are rather like "check the manual"...which in fact does not say a word about changing on access extensions.

Thanks for your help,

Karl


P.S. Maybe CSAV tries to check the internal file format of malware on access and thus does not detect eicar.xxx? I remember that the F-Prot engine has a switch to detect malware by internal file format...

[Technodrome]

Prefrences--->Files to included---> Type extensions. It works for On Demand and On Acceses scaner.


tECHNODROME

[Karl_Menshy]

Technodrome, I was hoping you would joint this thread...:) Thanks!

Well, your screeshot proves it, however it does not work on my system. I will try again on a clean install and report back. Btw, does the on access scanner support wildcards?

[Technodrome]

-{ Quote: " quoting: Karl_Menshy link=board=24;threadid=13513;start=0#msg86158 date=1063051536]
Btw, does the on access scanner support wildcards?
" }-

Yes it does *.xxx .


tECHNODROME

[Karl_Menshy]

Technodrome,

from the screenshot I get that you are using XP. It does work on XP, no doubt now that you have tested it, but it does not on Win98. Custom extensions are not used by the on access scanner.

Do you have a chance to test it on Win98 to see whether this is a question of my individual install or a general Win98 problem?

Karl

[Technodrome]

-{ Quote: " quoting: Karl_Menshy link=board=24;threadid=13513;start=0#msg86168 date=1063053058]
Technodrome,

from the screenshot I get that you are using XP. It does work on XP, no doubt now that you have tested it, but it does not on Win98. Custom extensions are not used by the on access scanner." }-

Hmmm. Yeah, thats possible...

-{ Quote: "Do you have a chance to test it on Win98 to see whether this is a question of my individual install or a general Win98 problem?

Karl
" }-

Sorry Karl,but I don't run 9x on any of my machines. :-[ :(



tECHNODROME

[Karl_Menshy]

Thanks for your help, Technodrome. I guess I will wait and see if the CSAV support has any news about it then.

Tried to reproduce the problem on some Win9x machines, including ME: on none of them the added extension work. So it should be a driver problem.

Karl

P.S. Maybe anybody else with a copy of CSAV on Win9x? :)

[Karl_Menshy]

Just reporting back:

After discussing this issue with tech support the missing scan of user added extensions seems to be a limitation of the Win9x based version. It does not affect NT based systems.

Karl

[Technodrome]

Thank you for letting us know this, Karl. ;)



tECHNODROME

[Karl_Menshy]

Actually the support told me that they did inform the developers about this issue...so there is still hope left for us users of the good ol' 9x ;)

[Karl_Menshy]

Additional info: The latest update to 4.90 seems to correct the issue for Win9x users. At least on my box custom extensions are scanned now. So it was a quick way from hope to success...anyway :) Good service from Command.

[Technodrome]

-{ Quote: " quoting: Karl_Menshy link=board=24;threadid=13513;start=0#msg91749 date=1065305242]
Additional info: The latest update to 4.90 seems to correct the issue for Win9x users. At least on my box custom extensions are scanned now. So it was a quick way from hope to success...anyway :) Good service from Command.
" }-

Good to hear this. CSAV v5 is here soon... ;)


tECHNODROME

[Karl_Menshy]

-{ Quote: " quoting: Technodrome link=board=24;threadid=13513;start=0#msg91756 date=1065312432]
Good to hear this. CSAV v5 is here soon... ;)


tECHNODROME
" }-

Hmmm...any more info about when? :)