Right-click scan-solution?

[raven211]

Thought through the things users said on my previous topic... what I'm searching for is a great right-click scanner, which I just ask for a second opinion on things that I'm unsure about.

The solution can preferably be multi-engine or have other factors (heuristics, behavior analyzis, etc.) which makes it logically more effective, and should be able to run without things in the background all the time (services, processes, etc.).


When you post a suggestion, please include instructions on how to turn off the software from running in the background (if necessary).


Thanks in advance for any tips!

A squared free ....http://www.emsisoft.com/en/software/free/

[Johnny123]

Originally Posted by raven211

Thought through the things users said on my previous topic... what I'm searching for is a great right-click scanner, which I just ask for a second opinion on things that I'm unsure about.

The solution can preferably be multi-engine or have other factors (heuristics, behavior analyzis, etc.) which makes it logically more effective, and should be able to run without things in the background all the time (services, processes, etc.).


When you post a suggestion, please include instructions on how to turn off the software from running in the background (if necessary).


Thanks in advance for any tips!

I use Avira for this on one machine and Avast on another. During the installation just unselect the real-time scanners. With Avira I have the scheduler and the tray gizmo in the background. Together they are using a total of 1.5 MB memory and so far today have used two seconds of CPU, so I don't bother turning them off. You could do this easily by opening services.msc and setting the services to manual. I'll have to take a look at the other with Avast, but I assume it's the about the same.

[raven211]

Thanks guys - I'll run Avira On-Demand for the time being, probably the easiest and a very effective way to go anyways without consuming resources.

[dell boy]

doesnt hitman pro use multi engines, but the free one doesnt remove, but for right click scanning it can tell you if somethings ok or not, if i recall correctly it uses prevx avira and some others to scan.
edit: it uses

• avira
• nod32
• g data
• prevx
• a2

which is pretty decent i think, im happy myself with just avast, and i have actually had some problems with right click scanning with the shell extension freezing up my computer, which i will talk to someone about if i get the chance.

[raven211]

Originally Posted by dell boy

doesnt hitman pro use multi engines, but the free one doesnt remove, but for right click scanning it can tell you if somethings ok or not, if i recall correctly it uses prevx avira and some others to scan.
edit: it uses

• avira
• nod32
• g data
• prevx
• a2

which is pretty decent i think, im happy myself with just avast, and i have actually had some problems with right click scanning with the shell extension freezing up my computer, which i will talk to someone about if i get the chance.

That's true, but here comes the little problem... it doesn't feature right-click scanning yet! Believe me - otherwise it would be golden.

[dell boy]

but, im sure there are ways of doing it, for example downloading to a folder, then creating a scan in hitman and do a custom scan to specific folder, untill they create their right click scanning feature, prevx alone is also pretty good for right click scanning,even the free one will atleast tell you whats good and not. apart from those any other anti-malware on the market will pretty much do right click scanning so pick one you like, or which has good detection rate, btw whats wrong with just using your av?
if you really wanted to know how safe something is you could always use virustotal...

[vijayind]

I use PrevX 3.0 sans the realtime protection. Fast and effective

[dell boy]

yes im sure it is very fast and effective, its also 20 quid a year though, so a no go for me.

Originally Posted by dell boy

yes im sure it is very fast and effective, its also 20 quid a year though, so a no go for me.

vijayind means sans protection only scanning realtime and OD which is free

[PrevxHelp]

Originally Posted by raven211

When you post a suggestion, please include instructions on how to turn off the software from running in the background (if necessary).

One comment on this - if the AV is prevented from running in the background, you will:

- Lose the ability for self protection (meaning if malware does run, it could cripple/disable the AV)

- Lose the ability to support limited users/fast user switching,

- Lose the ability for caching/system monitoring which could improve the speed of the scanning of the new file or intelligence gathering (i.e. taking into account the way that the file came onto the system if it came from the web/network/USB/etc.)

- Lose the ability for full system monitoring - protection wouldn't be enabled and no full system background scans would take place, which could rescan other files you've previously scanned with the right click scanner to see if they've now been detected as malicious.

- Lose the ability for background updates (for conventional AVs)

and a handful of other components as well. The best way to get around these would be to just disable the AV's realtime protection components and leave the rest running in the background. Even though there might be a small performance hit, it should be negligible to the time it takes for the AV to load everything in preparation for your scan (read the signatures from disk, parse them, load GUI components, start services, etc.)

Just my $0.02

[vijayind]

Originally Posted by thathagat

vijayind means sans protection only scanning realtime and OD which is free

Thanks thathagat
Yeah, that's what I meant.

@PrevxHelp: From what I understand, OP states that he already has a Anti-malware/HIPS/BB in realtime. But with exponential growth in malware, 1 product can no longer be depended upon. Hence OP wants a good OD scanner which he can use to double check.

And also off topic as pointed out @DellBoy, 20 quid is a lot for full-on Prevx protection. How about some relief in this time of crunch

[raven211]

Originally Posted by PrevxHelp

One comment on this - if the AV is prevented from running in the background, you will:

- Lose the ability for self protection (meaning if malware does run, it could cripple/disable the AV)

- Lose the ability to support limited users/fast user switching,

- Lose the ability for caching/system monitoring which could improve the speed of the scanning of the new file or intelligence gathering (i.e. taking into account the way that the file came onto the system if it came from the web/network/USB/etc.)

- Lose the ability for full system monitoring - protection wouldn't be enabled and no full system background scans would take place, which could rescan other files you've previously scanned with the right click scanner to see if they've now been detected as malicious.

- Lose the ability for background updates (for conventional AVs)

and a handful of other components as well. The best way to get around these would be to just disable the AV's realtime protection components and leave the rest running in the background. Even though there might be a small performance hit, it should be negligible to the time it takes for the AV to load everything in preparation for your scan (read the signatures from disk, parse them, load GUI components, start services, etc.)

Just my $0.02

Thank you for your input, Joe. I do run like Johnny mentioned - only disabling the guard during installation. Everything else like updates and proper scan settings, etc. are all there on my setup.

[Greg S]

Originally Posted by dell boy

but, im sure there are ways of doing it, for example downloading to a folder, then creating a scan in hitman and do a custom scan to specific folder,..

Sounds decent so if you know of a way to do it, please share with us because I don't think it's possible as of right now. I could be wrong though.

[raven211]

Originally Posted by vijayind

From what I understand, OP states that he already has a Anti-malware/HIPS/BB in realtime. But with exponential growth in malware, 1 product can no longer be depended upon. Hence OP wants a good OD scanner which he can use to double check.

Not quite... as of now, I restrict my normal operation extremely, then check things that I'm unsure about and about to run with Avira AntiVir Personal (highest heuristic settings applied). This is all just precautions in case any danger should actually appear - I've not bounced into ANY malware through many reformats in my continous hard-core testing of software.

[PROROOTECT]

raven listen me, please:

* cool tool: SpyDLLRemover v2.50 http://rootkitanalytics.com/userland...ll-remover.php - for rootkit detection and ...
... and another tool is: Advanced Windows service Manager http://securityxploded.com/winservicemanager.php ... of rootkits also ...

* spbat.exe from Brock: http://bugczech.fu8.com/

* Process Hacker - link on my Sign.

*RSIT.exe (with HijackThis Trend Micro and +): http://www.wilderssecurity.com/showthread.php?t=242949

* other good antirootkits

* ESET SysInspector.

P.

[raven211]

Originally Posted by PROROOTECT

raven listen me, please:

* cool tool: SpyDLLRemover v2.50 http://rootkitanalytics.com/userland...ll-remover.php - for rootkit detection and ...
... and another tool is: Advanced Windows service Manager http://securityxploded.com/winservicemanager.php ... of rootkits also ...

* spbat.exe from Brock: http://bugczech.fu8.com/

* Process Hacker - link on my Sign.

*RSIT.exe (with HijackThis Trend Micro and +): http://www.wilderssecurity.com/showthread.php?t=242949

* other good antirootkits

* ESET SysInspector.

P.

Thank you, Pro - all tips are welcome. It's not only beneficial for me, but anyone at this forum - either with the same setup, or simply looking for On-demand tools to use.

[Espresso]

You can run Avira updates with the Windows Task Scheduler (run update.exe on a schedule) and do away with the scheduling service. You can set the drivers to manual load as well (IIRC, none are required for manual scans).

[PROROOTECT]

Hi Espresso, run Avira AntiVir update with the Windows Task Scheduler - is an idea very appealing. I could get rid with pleasure a process in my task manager: sched.exe (Working Set- Use Memory: 816 KB, Handles: 161, Threads: .
Now set the driver to manual load - even better idea, how, please?

Could you give us the detailled prescription, docteur?

(I ask not only for me but for all those who do not know).


PROROOTECT

[PROROOTECT]

Cool Espresso, I put the service sched.exe in 'Manual', in my Services/Avira AntiVir Scheduler. And then: restart of computer (for put off your sched.exe, easy and safe). That's all.

And then, when I want (once a day ...):

* Services/Avira AntiVir Scheduler/right click: Start. And then
* Right click on Avira icon in the System Tray: Start Update.
* After Update: restart your PC.
Et voila!

Thank you for Espresso idea!


PROROOTECT

PS. I have the link of Sevices on my Desktop, of course. Allways.

P.

[Tarq57]

I'm surprised nobody has suggested the free version of MBAM.
Context menu scanning included, and , I believe, without running a background service.
Spybot (current version) can do this as well.
Asquared runs a background service, even when not in use. Good, though.
SAS has context menu scanning, but only provided the application is already running. (Good, too. I can't run it though; Ive had to uninstall it due to an apparent confliction with Threatfire.)

[Joeythedude]

1.
I use MBAM. Very handy.
2.
Also virustotal's addin is very good.
http://www.virustotal.com/metodos.html
3.
Sandboxie's rightclick option is also very good.

That keeps me happy.

[firzen771]

Originally Posted by Joeythedude

1.
I use MBAM. Very handy.
2.
Also virustotal's addin is very good.
http://www.virustotal.com/metodos.html
3.
Sandboxie's rightclick option is also very good.

That keeps me happy.

wow nice find with the virustotal right click. i never knew about it. definetly gunna use that now especially with my new setup.

[Dregg Heda]

Originally Posted by firzen771

wow nice find with the virustotal right click. i never knew about it. definetly gunna use that now especially with my new setup.

QFT!

Thanks for this Joey!