Dr Web users... Number of definitions?

Discussion in 'other anti-virus software' started by shorty1, Oct 18, 2004.

Thread Status:
Not open for further replies.
  1. shorty1

    shorty1 Guest

    Hoping some Dr Web users could weigh in with the total number of definitions that is currently showing in their program. I know there was issues with server lag a couple wees ago or so and the total number shown here: http://www.drweb.com/ was different than what the program was showing, but then it got better and actually seemed synchronized for a while. But now something has gone to the dogs again and the program is now showing definitions of 57474 and a date of 19-10-2004 while the webpage is showing 57371 and a date of 19-10-2004.
    Not a big deal I suppose, I'm mostly wondering if the error is on my end or theirs.
    On a side note, I did check the available bases here http://download.drweb.com/bases/ against what I have and they all match. Me thinks maybe they need a new bean counter over there. :D
     
  2. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    @shorty1- My count as of 10/19/04 shows identical to yours -- 57474. Also, I checked back to see if I have all the dailies on the DrWeb site. Yep, I have them all. It's a minor arithmetic error, I guess. Sorta like the mole on Elizabeth Taylor's lovely face. :)
     
  3. shorty1

    shorty1 Guest

    Thanks for the reply. Much appreciated.
     
  4. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum
    this is slightly off topic but does anyone know the full listing of command line switches available for DrWeb?
     
  5. shorty1

    shorty1 Guest

    Re: command line switches

    Here is some, and although I don't think it is a complete list it's probably enough to keep you busy for awhile. :)
    I saved the text file from a install of 4.31b, btw.

    Command line options (delimited with blanks)

    /@[+]<file> - check objects listed in <file>.
    Each object must be identified on a separate line containing
    a full pathname (to check file) or the "?boot" keyword (to check
    boot sectors). The list file can be created with any text editor.
    When scan is completed, Dr.Web deletes the list file, unless
    "+" is included in the option.
    A list file can also be generated by ADinf. In this case, the
    integrity checker will include in the file modified objects only.
    Then, this list can be used by Dr.Web to limit the scan scope,
    which can substantially reduce overall scan time. If ADinf32 is
    configured to launch Dr.Web, the integrity checker inserts
    the /@ option in the command line and starts the scanner
    automatically (see ADinf32 Manual for details);
    /AL - scans all files on a given drive or directory;
    /AR[D|M|R][P][N] - checks all files inside archives (ARJ, CAB, GZIP, LZH, RAR,
    TAR, ZIP,...). Use the optional parameters to specify how archives with
    infected (or suspicious) objects should be treated as a whole:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action; the N option suppresses the archive type
    after the name of the archive file;
    /CN[D|M|R][P][N] - specifies how containers (HTML, RTF, PowerPoint,..)
    with infected (or suspicious) objects should be treated as a whole:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action; the N option suppresses the container
    type after the name of the container file;
    /CU[D|M|R][P] - cures infected objects and delete incurable files. Or use the
    optional parameters to specify how infected filed should be treated:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action;
    /DA - runs Dr.Web only once in a day. For this option, the configuration file,
    (INI-file) containing the date of the next scanning session must be
    present. This option is useful for starting DrWeb386 automatically
    from the AUTOEXEC.BAT file only once in a day on booting the computer;
    /EX - scans files that have extensions associated with executable modules
    and MS Office documents (COM, EXE, SYS, BAT, CMD, DRV, BIN, DLL, OV?,
    BOO, PRG, VXD, 386, SCR, FON, DO?, XL?, WIZ, RTF, CL*, HT*, VBS, JS*,
    INF, A??, ZIP, R??, PP?, HLP, OBJ, LIB, MD?, INI, MBR, IMG, CSC, CPL,
    MBP, SH, SHB, SHS, SHT*,MSG, CHM, XML, PRC, ASP, LSP, MSO, OBD, THE*,
    EML, NWS, TBB);
    /FM - scans files (regardless of the extension) whose internal format is
    that of an executable module or MS Office document with macros (such
    as MS Word or Excel files);
    /GO - goes without asking you what to do next (in such situations as not
    enough disk space for unpack operation, invalid parameters in the
    command line, Dr.Web infected by unknown virus, etc.). This option
    might be useful, say, for automatic check of incoming e-mail;
    /HA - enables the heuristic analyzer that can detect unknown viruses;
    /IC[D|M|R][P] - specifies how to treat incurable files:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action;
    /INI:<path> - uses an alternative configuration file (INI-file);
    /LNG[:<path>] - uses an alternative language file (DWL-file), or built-in
    (English) language;
    /ML[D|M|R][P][N] - checks files of mail format (UUENCODE, XXENCODE, BINHEX,
    MIME,...). Use the optional parameters to specify how mail files with
    infected (or suspicious) objects should be treated as a whole:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action; the N option suppresses the mail type
    after the name of the mail file;
    /NI - ignores the settings in the configuration file (DRWEB32.INI);
    /NR - does not create report file;
    /NS - runs non-stop (no interruption by pressing ESC);
    /OK - writes a full list of scanned objects and displays "OK" next to clean
    objects;
    /PF - displays the "Scan another diskette?" prompt after checking a floppy
    disk;
    /PR - prompts to confirm an action on an infected or suspicious file;
    /QU - quits the program when scan is finished (DrWeb32W only);
    /RP[+]<file> - writes the scan results to a file (by default,
    <program>.LOG), <file> is the full pathname of a report file. If the
    plus sign is included, the recent report will be appended to the
    report file; otherwise the report file will be overwritten;
    /SD - scans subdirectories;
    /SO - plays sounds;
    /SP[D|M|R][P] - specifies how to treat suspicious files:
    D - delete, M - move (by default, to the INFECTED.!!! directory),
    R - rename (by default, the extension's first character is changed to
    "#"); P - prompt before action;
    /SS - saves current settings when the program terminates;
    /TB - scans boot sectors and master boot record;
    /TM - scans memory for viruses (including Windows system memory for DrWeb32W
    and DrWebWCL);
    /UP[N] - checks executable files packed by ASPACK, COMPACK, DIET, EXEPACK,
    LZEXE, OPTLINK, PECOMPACT, PEPACK, PGMPAK, PKLITE, WWPACK, WWPACK32,
    UCEXE, UPX; files converted by BJFNT, COM2EXE, CONVERT, CRYPTCOM,
    CRYPTEXE, PECRYPT, PESHIELD, PROTECT, TINYPROG; and files immunized by
    CPAV, F-XLOCK, PGPROT, VACCINE.
    N - suppresses the compression utility name after the name of the
    archived file;
    /WA - waits after scan is finished if viruses or suspicious objects were found
    (DrWebWCL and DrWeb386 only);
    /? - displays help.
     
  6. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum
    very nice..... thank you.
     
  7. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    @shorty- Wow, great info!. I did a cut&paste into my DRW knowledge base. Thanks.
     
  8. shorty1

    shorty1 Guest

    While these switches work with the GUI version of Dr Web they are mainly meant for the command line scanner.
    I only use a few of these switches to control the updating process and scheduled scans both of which are intiated by Windows Task Scheduler.
    For example, my updater command line looks like this:"C:\Program Files\DrWeb\drwebupw.exe" /ST /GO
    The /ST switch makes the updater invisible and the /GO switch allows it run thru its paces without prompting from the user. I just recently started using the /ST switch and I'm not sure if I like the invisible part yet as I kind of like seeing the updater pop up for a couple seconds. I guess it's reassuring. Anyway, I will give it more time before I decide either way.

    As for scheduled scans, my command line looks like this: "C:\Program Files\DrWeb\drweb32w.exe" C: /GO
    With the C: switch basically telling the scanner what drive(s) to scan.
    If you wanted to scan all fixed drives the switch * would accomplish that. And, just as a FYI, when the scanner scans it uses the settings/options ie: heuristics, file types, actions etc. as they have been set previously by the user through the GUI. I assume you could use the /NI switch and then enter in a bunch of switches to control the scanner options but that gives me a headache just thinking about it. :)
    Anyway, enough out of me. Hopefully someone can make some sense of all this blather.
     
Loading...
Thread Status:
Not open for further replies.