CSAV experts please...

Discussion in 'other anti-virus software' started by Karl_Menshy, Sep 8, 2003.

Thread Status:
Not open for further replies.
  1. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Hi all, I need help from one of the command antivirus experts in here, please.

    I am trying to set up CSAV. By default the on access scanner scans certain predefined and 'hardcoded' extensions. You can change the file extensions to be included in an on demand scan, but this seems to not affect the on access component. Can anybody verify this?

    E.g. 'eicar.com' is detected, 'eicar.xxx' is not.

    I know that renamed malware is no immediate risk, however I would like to adjust file extension list to my needs. Any advice?

    I contacted Command UK about this, but the replies are rather like "check the manual"...which in fact does not say a word about changing on access extensions.

    Thanks for your help,

    Karl


    P.S. Maybe CSAV tries to check the internal file format of malware on access and thus does not detect eicar.xxx? I remember that the F-Prot engine has a switch to detect malware by internal file format...
     
  2. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Prefrences--->Files to included---> Type extensions. It works for On Demand and On Acceses scaner.


    tECHNODROME
     

    Attached Files:

  3. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Technodrome, I was hoping you would joint this thread...:) Thanks!

    Well, your screeshot proves it, however it does not work on my system. I will try again on a clean install and report back. Btw, does the on access scanner support wildcards?
     
  4. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Yes it does *.xxx .


    tECHNODROME
     
  5. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Technodrome,

    from the screenshot I get that you are using XP. It does work on XP, no doubt now that you have tested it, but it does not on Win98. Custom extensions are not used by the on access scanner.

    Do you have a chance to test it on Win98 to see whether this is a question of my individual install or a general Win98 problem?

    Karl
     
  6. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Hmmm. Yeah, thats possible...

    Sorry Karl,but I don't run 9x on any of my machines. :oops: :(



    tECHNODROME
     
  7. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Thanks for your help, Technodrome. I guess I will wait and see if the CSAV support has any news about it then.

    Tried to reproduce the problem on some Win9x machines, including ME: on none of them the added extension work. So it should be a driver problem.

    Karl

    P.S. Maybe anybody else with a copy of CSAV on Win9x? :)
     
  8. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Just reporting back:

    After discussing this issue with tech support the missing scan of user added extensions seems to be a limitation of the Win9x based version. It does not affect NT based systems.

    Karl
     
  9. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Thank you for letting us know this, Karl. ;)



    tECHNODROME
     
  10. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Actually the support told me that they did inform the developers about this issue...so there is still hope left for us users of the good ol' 9x ;)
     
  11. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Additional info: The latest update to 4.90 seems to correct the issue for Win9x users. At least on my box custom extensions are scanned now. So it was a quick way from hope to success...anyway :) Good service from Command.
     
  12. Technodrome

    Technodrome Security Expert

    Joined:
    Feb 13, 2002
    Posts:
    2,140
    Location:
    New York
    Good to hear this. CSAV v5 is here soon... ;)


    tECHNODROME
     
  13. Karl_Menshy

    Karl_Menshy Registered Member

    Joined:
    Apr 18, 2003
    Posts:
    135
    Hmmm...any more info about when? :)
     
Thread Status:
Not open for further replies.