Re: Antivirus engine check utility
From: Ned Flanders (nedfla@hotmail.com)
Date: 11/02/02
- Next message: Ed: "Downloading Security Updates"
- Previous message: Bill Sanderson: "Re: Antivirus engine check utility"
- In reply to: Ned Flanders: "Re: Antivirus engine check utility"
- Next in thread: Michel Gallant (MVP): "Re: Antivirus engine check utility"
- Reply: Michel Gallant (MVP): "Re: Antivirus engine check utility"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Ned Flanders" <nedfla@hotmail.com> Date: Fri, 1 Nov 2002 20:45:52 -0600
On NT the file arrives in %TEMP%, which coincidentally happens to be
C:\TEMP. BUT on my other machine (where NT is installed on the D: drive...)
the View Shared Folders does not produce an output window, and the Verify AV
part generates this:
Antivirus Operation Verification
AVCheck 1.0 11/01/2002
----------------------------------------------------------------------------
---- The Antivirus Status Java applet cannot run properly because either: You did not grant the request privileges -->Reload the page (Ctrl + F5 for IE) and grant privileges ... or You do not have the required CA certificate installed Creating a directory named TEMP on the C: drive fixed both problems. "Ned Flanders" <nedfla@hotmail.com> wrote in message news:eY0FTihgCHA.2008@tkmsftngp08... > Works like a champ on Win2K SP3 and WinNT4 SP6a, except for the littering up > of my desktop with the batch file ;-) One thing I noticed is on my machine > that has 40-odd shares the NET SHARE command doesn't wait after a screenful > so some just scroll off the screen. Also - I'm completely unfamiliar with > Java, but isn't there a way to make the applet aim at %TEMP% instead of the > desktop? That way I won't care if there's an extra file on the system, and > my nightly %TEMP% cleanup will get it anyway. I'm *quite* anal retentive > about keeping my desktop tidy :-) > > Alternatively, make it a self-destructing batch file like so: > > @echo off > net share | more > pause > del %0 <EOF goes on THIS line to avoid "batch file missing" messages> > > That's the only nits I have to pick, and they're pretty small ones. > > "Michel Gallant (MVP)" <neutron@istar.ca> wrote in message > news:3DC2C400.13427A07@istar.ca... > > I have developed a utility to proactively check if your antivirus engine > > is actually working and that it is configured properly to scan all file > types. > > Don't rely on that icon-tray .... make SURE it actually is working! > > > > Originally targetted at NAV, I have reduced the functionality to implement > > an AV engine check from a digitally-signed web page to: > > > > - attempt to write the standard EICAR virus string, as a text file, to > the > > local client and detect the AV engine response (the EICAR string is > byte-wise > > embedded in the signed Java applet) > > > > - invoking the "cmd /K net share" command on NT, 2000 or > "netwatch.exe" for Win9x > > to easily allow any user to see their network shares (again for > non-savy users) > > > > Might be interesting to see if any firewalls/gateways are intelligent > enough to pick up > > the eicar string embedded this way :-) > > > > Anyone wishing to try the utility, email me for the link. > > > > - Michel Gallant > > MVP Security > > http://home.istar.ca/~neutron > > > > > >
- Next message: Ed: "Downloading Security Updates"
- Previous message: Bill Sanderson: "Re: Antivirus engine check utility"
- In reply to: Ned Flanders: "Re: Antivirus engine check utility"
- Next in thread: Michel Gallant (MVP): "Re: Antivirus engine check utility"
- Reply: Michel Gallant (MVP): "Re: Antivirus engine check utility"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
