NOD32, automatically clean infections?

Discussion in 'NOD32 version 2 Forum' started by Ahamay17, May 22, 2004.

Thread Status:
Not open for further replies.
  1. Mele20

    Mele20 Former Poster

    Joined:
    Apr 29, 2002
    Posts:
    2,495
    Location:
    Hilo, Hawaii
    Nope. Of course the scans would take longer if I was but I still think there wouldn't be much difference between AH scan and regular.
     
  2. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,208
    Location:
    Fayetteville, Ga
    When putting in the switches. c:\ /clean /ah /all /. Do i have the spaces in the right places? Thank you for all the help.
     
  3. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Yes, you will get a error message if you have a space in the wrong place...

    Cheers :D
     
  4. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,208
    Location:
    Fayetteville, Ga
    Thank you very much Blackspear. Your help is appreciated.
     
  5. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    WP, regarding your string of switches, the last one (/.), is that a typo?
     
  6. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,208
    Location:
    Fayetteville, Ga
    I don't have the . in the switches. That was only in my post. D+C do you have quit at the end of your switches that you use for scheduled scans?
     
  7. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Hello again, WP,

    Yes (/quit). I have no reason to view the log, unless it detected a virus. And if it did, it would have notified me in other ways (I think). :doubt:
     
  8. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    If you don't have the "." in your string, are you ending the string with a "/"? If so, what does just a slash (/) by itself do?
     
  9. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,208
    Location:
    Fayetteville, Ga
    I don't end the switches with the / I was just checking to see if I was putting the spaces in the right places. Thank you for your help.
     
  10. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Sorry. I was taking the example in your post literally. Thought I was missing a new kind of switch! :)
     
  11. Ahamay17

    Ahamay17 Registered Member

    Joined:
    May 13, 2004
    Posts:
    21
    Location:
    Broken Arrow, Oklahoma
    /local /clean /arch+ /pack+ /ah /quit

    Above is the literal string I have, since I switched from "c:\ " to " /local " to start it off (because I have 2 hard drives I want scanned) it no longer quits after the scan is complete. Anyone have any ideas?

    Ray
     
  12. Bandicoot

    Bandicoot Eset Staff

    Joined:
    Mar 23, 2004
    Posts:
    297
    Location:
    California
    Hi Ray,

    You could try 2 things --- use "/quit+ " instead of just "/quit "
    or you could specify the drives. For example: "c:x:\ /arch+ /pack+ /ah /quit"
    I'm not sure if you'll need a 'space' after the colon for each drive specified because I haven't got a 2-drive machine to test it on.

    Regards,
    Bandicoot. :)
     
  13. Ahamay17

    Ahamay17 Registered Member

    Joined:
    May 13, 2004
    Posts:
    21
    Location:
    Broken Arrow, Oklahoma
    Thanks Bandicoot, I'll try the /quit+ during my scan tonight. I tried to specify both drives a while back and it tried to scan both at the same time, and it took waaaaaaaay to long.

    Ray
     
  14. kiyotey

    kiyotey Registered Member

    Joined:
    Sep 6, 2004
    Posts:
    4
    Hi Everybody,
    realize these posts have been a while back, but wanted to know, I have set up nod32 with all switches and it is working beautifully, however while scanning it shows the "scanning log" tab screen and I just wanted to know, I have set with the switch to scroll+ and log+ Is it staying on the log screen and it ticked to scroll, but is not showing all the files being scanned while scrolling, like if you run nod32's on demand scanner at any other time. Does anyone know why this is? Thanks to anyone with any advice. And most thanks to everyone who participated in this thread re: command line switches. I simply just had to read all of your many posts and was able to set up nod to run via all the great switches. Thanks to all!!! ;)
     
  15. kiyotey

    kiyotey Registered Member

    Joined:
    Sep 6, 2004
    Posts:
    4
    nm everyone. I fixed the prob. I did'nt have wrap+ as one of my switches. :p
     
  16. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Good to see.

    You may want to have a look here for further switches available...

    Hope this helps...

    Cheers :D
     
  17. Legion

    Legion Registered Member

    Joined:
    Dec 9, 2004
    Posts:
    2
    Hi everyone!

    I'm trying to set up NOD32 so people who don't want to be bothered with questions on what to do when a file is infected, can use it. People that just want it to be as automatic as possible. On my own computer I want to be asked what to do if something is infected, but some don't so...

    This is what I have right now.

    C:\ /clean /all /subdir+ /heur+ /scanfile+ /scroll+ /arch+ /pack+ /mapi- /pattern+ /scanboot+ /scanmbr+ /log+ /quit+

    I get the feeling reading some other threads that you can't do the following:

    If a virus is found in a file, try to clean (/clean) the file. If that doesn't work, put it quarantine (/quarantine?) and then delete (/delete) the file.

    Is it possible? (1. Clean 2. Quarantine 3. Delete).
    Perhaps even 1. Clean. 2. Rename. 3. Quarantine 4. Delete?

    And I haven't seen anywhere that there is a command for putting a file in quarantine.
     
    Last edited: Dec 9, 2004
  18. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,229
    You are correct, the only way I know of to get files in quarantine is to actually select the clean option from the NOD32 menu, and having the quarantine option option selected on the actions tab of course, meaning you have to actually be present and click it with the mouse. I believe Eset is working to improve the quarantine function and make it more like some other AV makers and actually move the file to the infected folder and possibly even have an automatic option of submitting the file for analysis since anything going into quarantine should be a heuristic detection in theory at least. Until Eset improves the handling of such files there isn't much you can do, that I know of at least.
     
  19. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    There is not one at the present moment.

    Cheers :D
     
    Last edited: Dec 9, 2004
  20. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,229
    HI!! Blackspear!! You say there IS a command for quarantining a file currently?? What is it? THANKS in advance buddy.
     
  21. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Sorry mate, I left out one small word, that being not ;) :D

    It has been added as a request in the Future Changes sticky.

    Cheers :D
     
  22. Shaker

    Shaker Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    153
    Location:
    Norther California
    Ok, now that I am totally confused.....

    Am I ok using this for my schedule scans......

    C:\ /clean /ah /all /subdir+ /heur+ /scanfile+ /scroll+ /arch+ /pack+ /mapi- /pattern+ /scanboot+ /scanmbr+ /heurdeep /log+ /prompt /program


    Please say yes, please, please, please.
     
  23. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Yes, the answer is yes, and there is a thread here on setting up Commandline scans with Nod32 ;) :D

    Hope this helps...

    Cheers :D
     
  24. Shaker

    Shaker Registered Member

    Joined:
    Aug 12, 2004
    Posts:
    153
    Location:
    Norther California
    Ok, I feel better now. :)
     
  25. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    That's good, any time ;) :D

    Cheers :D
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.