Sign in to follow this  
julevine

a squared comand line scanner traces scan problem

Recommended Posts

when i do traces scan with updated sigs it dont scan at all

There is something wrong with the trace signatures

i used older sigs and it worked correctly

this scan report is the bad scan it don't scan at all

C:\a-squared>a2cmd.exe/t, /traces

Emsisoft Commandline Scanner v. 5.1.0.4

© 2003-2011 Emsi Software GmbH - www.emsisoft.com

Emsisoft Commandline Scanner - Version 5.1

Last update: 7/10/2012 12:25:58 PM

Scan settings:

Objects: Traces

Scan archives: Off

Heuristics: Off

ADS Scan: Off

Scan start: 7/10/2012 12:26:05 PM

AppData+\regstrwmp.dll

C:\a-squared>

//////////////////////////////////////////////////////////

Here is the working scan report you will see the difference it showes total traces and scans for traces

C:\a-squared>a2cmd.exe/t, /traces

Emsisoft Commandline Scanner v. 5.1.0.4

© 2003-2011 Emsi Software GmbH - www.emsisoft.com

Emsisoft Commandline Scanner - Version 5.1

Scan settings:

Objects: Traces

Scan archives: Off

Heuristics: Off

ADS Scan: Off

Scan start: 7/10/2012 11:55:38 AM

HKEY_CLASSES_ROOT\CLSID\{4025BF0A-5171-467B-8796-C74F7CDEF5E9}\InprocServer32

Scanned

Files: 0

Traces: 412924

Cookies: 0

Processes: 0

Found

Files: 0

Traces: 0

Cookies: 0

Processes: 0

Scan end: 7/10/2012 11:56:01 AM

Scan time: 0:00:22

C:\a-squared>

hope you can fix this problem soon

thank you

Share this post


Link to post
Share on other sites

i was using very old sigs from a older version

but i think it around less then 4 weeks it was maybe 2 weeks when it was working

but don't know for sure

check last 6 weeks of sigs just to make sure

hope this helps

Share this post


Link to post
Share on other sites

It does. The latest stand alone command line version is 5.1 and is still using the old Emsisoft 5.x engine. There is a newer version 6.5 of the command line scanner out that is part of Emsisoft Anti-Malware as well as the Emergency Kit that uses the new Emsisoft 6.x engine. The reason why the standalone command line scanner 6.5 hasn't been released yet is that the command line scanner is used by various large websites like VirusTotal or VirScan for example and we can't release the new version until they have finished their testing as well as integration of the new version.

Share this post


Link to post
Share on other sites

so should i just use the new version now untill the stand alone version comes out

does these commands still work in the new version becuase it dont show if it on or off

/r, /riskware

/h, /heuristic

it only shows if archive and ntfs stream scan is on or off

it should show if riskware and heuristic scan is on

Edited by julevine

Share this post


Link to post
Share on other sites

In general please don't edit questions into previously made replies. As almost every other technical support we rely heavily on reply notifications. If you reply "Thank you!" we will read your thanks and won't visit the topic again as for us it is closed at that point. If you then edit in a new question later, your question will go completely unnoticed. So don't do that if you want a timely answer to your requests. Instead create another reply so a new notification is sent out.

so should i just use the new version now untill the stand alone version comes out

does these commands still work in the new version becuase it dont show if it on or off

/r, /riskware

/h, /heuristic

it only shows if archive and ntfs stream scan is on or off

it should show if riskware and heuristic scan is on

The /h parameter has been removed. Heuristics are now always on. The /r parameter does still work but is no longer listed in the log file. Since I am not working on the command line scanner I can't tell you if it was an intentional change and if it was what the reasoning behind this decision was. But I will ask for you.

In general I suggest using the command line scanner bundled with EAM as well as EEK over using the standalone command line scanner due to the large amounts of improvements.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.