a squared comand line scanner traces scan problem

[julevine 0]

when i do traces scan with updated sigs it dont scan at all

There is something wrong with the trace signatures

i used older sigs and it worked correctly

this scan report is the bad scan it don't scan at all

C:\a-squared>a2cmd.exe/t, /traces

Emsisoft Commandline Scanner v. 5.1.0.4

© 2003-2011 Emsi Software GmbH - www.emsisoft.com

Emsisoft Commandline Scanner - Version 5.1

Last update: 7/10/2012 12:25:58 PM

Scan settings:

Objects: Traces

Scan archives: Off

Heuristics: Off

ADS Scan: Off

Scan start: 7/10/2012 12:26:05 PM

AppData+\regstrwmp.dll

C:\a-squared>

//////////////////////////////////////////////////////////

Here is the working scan report you will see the difference it showes total traces and scans for traces

C:\a-squared>a2cmd.exe/t, /traces

Emsisoft Commandline Scanner v. 5.1.0.4

© 2003-2011 Emsi Software GmbH - www.emsisoft.com

Emsisoft Commandline Scanner - Version 5.1

Scan settings:

Objects: Traces

Scan archives: Off

Heuristics: Off

ADS Scan: Off

Scan start: 7/10/2012 11:55:38 AM

HKEY_CLASSES_ROOT\CLSID\{4025BF0A-5171-467B-8796-C74F7CDEF5E9}\InprocServer32

Scanned

Files: 0

Traces: 412924

Cookies: 0

Processes: 0

Found

Files: 0

Traces: 0

Cookies: 0

Processes: 0

Scan end: 7/10/2012 11:56:01 AM

Scan time: 0:00:22

C:\a-squared>

hope you can fix this problem soon

thank you

[Fabian Wosar 390]

Would you mind testing with the command line scanner bundled with Emsisoft Emergency Kit?

http://download12.emsisoft.com/EmsisoftEmergencyKit.zip

If it happens with that version as well, may I ask how old your first signatures are? Just to narrow the time frame down a bit.

[julevine 0]

i was using very old sigs from a older version

but i think it around less then 4 weeks it was maybe 2 weeks when it was working

but don't know for sure

check last 6 weeks of sigs just to make sure

hope this helps

[Fabian Wosar 390]

Does it happen with the command line scanner 6.5 bundled with EEK as well?

[julevine 0]

good it not bundled in 1 file

going to try it now

[julevine 0]

seems like it working

i was wondering does this link have the lastest version

http://download1.emsisoft.com/a2cmd.zip

[Fabian Wosar 390]

It does. The latest stand alone command line version is 5.1 and is still using the old Emsisoft 5.x engine. There is a newer version 6.5 of the command line scanner out that is part of Emsisoft Anti-Malware as well as the Emergency Kit that uses the new Emsisoft 6.x engine. The reason why the standalone command line scanner 6.5 hasn't been released yet is that the command line scanner is used by various large websites like VirusTotal or VirScan for example and we can't release the new version until they have finished their testing as well as integration of the new version.

[julevine 0]

can you list the files that is for the comand line scanner so i can just have a folder with comand line scanner files

[Fabian Wosar 390]

Unless you are short 10 MB on your disk I would strongly advise against removing any files.

[julevine 0]

i understand

what changes are in the new scan engine

i would like to know

[Fabian Wosar 390]

You can find the changes here:

http://changeblog.emsisoft.com/2012/06/05/emsisoft-free-emergency-kit-2-0-0-7-released/

All changes are essentially due to the upgrade from the Emsisoft 5.x to the 6.x engine.

[julevine 0]

so should i just use the new version now untill the stand alone version comes out

does these commands still work in the new version becuase it dont show if it on or off

/r, /riskware

/h, /heuristic

it only shows if archive and ntfs stream scan is on or off

it should show if riskware and heuristic scan is on

Edited July 10, 2012 by julevine

[julevine 0]

please reply about the post above

i read /h, /heuristic was removed is this true

The readme needs to be updated

[Fabian Wosar 390]

In general please don't edit questions into previously made replies. As almost every other technical support we rely heavily on reply notifications. If you reply "Thank you!" we will read your thanks and won't visit the topic again as for us it is closed at that point. If you then edit in a new question later, your question will go completely unnoticed. So don't do that if you want a timely answer to your requests. Instead create another reply so a new notification is sent out.

so should i just use the new version now untill the stand alone version comes out

does these commands still work in the new version becuase it dont show if it on or off

/r, /riskware

/h, /heuristic

it only shows if archive and ntfs stream scan is on or off

it should show if riskware and heuristic scan is on

The /h parameter has been removed. Heuristics are now always on. The /r parameter does still work but is no longer listed in the log file. Since I am not working on the command line scanner I can't tell you if it was an intentional change and if it was what the reasoning behind this decision was. But I will ask for you.

In general I suggest using the command line scanner bundled with EAM as well as EEK over using the standalone command line scanner due to the large amounts of improvements.