Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
2158 Views 14 Replies Latest reply: Jan 16, 2013 10:34 AM by wwarren RSS 1 2 Previous Next
nisreen Newcomer 8 posts since
Dec 29, 2012
Currently Being Moderated

Jan 5, 2013 5:47 AM

Scan USBs

Hi all,

 

I would to ask if there is any scripts we can use to force scan the USB once it plugged to the computer.

 

Please help me in this.

 

Thanks alot,


  • hem McAfee Employee 848 posts since
    Nov 18, 2009
    Currently Being Moderated
    1. Jan 7, 2013 12:02 PM (in response to nisreen)
    Re: Scan USBs

    If you have Autoplay enabled from GPO then when you plugin the USB sticks, VSE OAS will scan the files.


    Thanks
    Hem





  • rmetzger Champion 566 posts since
    Jan 4, 2005
    Currently Being Moderated
    2. Jan 7, 2013 12:48 PM (in response to nisreen)
    Re: Scan USBs

    Also, make sure that from the Control Panel:

    On-Access Scan Properties>All Processes>Scan Items>Scan Files

    Check "When reading from disk"

     

    Make the equivalent settings change from ePO if available.

     

    This will ensure that any file on the USB drive is scanned prior to execution (autorun or otherwise).

     

    In addition, make sure that from the Control Panel:

    On-Access Scan Properties>All Processes>Scan Items>Scan Files

    Check "When writing to disk"

     

    to ensure that files written to the USB drive are scanned during the write process.

     

    These 2 settings should protect against spreading virus' when keeping the signature files completely up to date.

     

    Hope this is helpful.

    Ron Metzger

  • petersimmons McAfee Employee 230 posts since
    Dec 22, 2009
    Currently Being Moderated
    3. Jan 9, 2013 10:54 AM (in response to nisreen)
    Re: Scan USBs

    On Access Scanning will automatically scan any files touched on the device. You really don't want to scan a full USB drive when inserted. Keep in mind these drives now come in multi-terabyte size. Inserting a drive like this would take hours to scan (because USB is a slow interface). You realy don't want to do this. You'll already be covered with the OAS.

  • rmetzger Champion 566 posts since
    Jan 4, 2005
    Currently Being Moderated
    5. Jan 12, 2013 5:24 PM (in response to nisreen)
    Re: Scan USBs

    nisreen wrote:

     

    Thanks alot for your replay,

     

    but On-access scan propeties >Scan Files "When writing to disk" is already checked and still am infected from the USBs it is not scanning the USB.

    How to make it available in the ePO.

     

    Thanks alot,

    It's not enough 'When writing to disk' you need to do it 'When reading from disk'

     

    On-Access Scan Properties>All Processes>Scan Items>Scan Files

    Check "When reading from disk"

     

    Make the equivalent settings change from ePO.

     

    Ron Metzger

     

    Message was edited by: rmetzger emphasis in quote. on 1/12/13 6:24:19 PM EST
  • petersimmons McAfee Employee 230 posts since
    Dec 22, 2009
    Currently Being Moderated
    6. Jan 13, 2013 9:56 PM (in response to rmetzger)
    Re: Scan USBs

    Yes. You must scan "When Reading from Disk" all the time. If you aren't just go ahead and uninstall the software.

  • xenon1 Newcomer 25 posts since
    Nov 9, 2009
    Currently Being Moderated
    8. Jan 15, 2013 3:44 AM (in response to nisreen)
    Re: Scan USBs

    ... to activate "When reading from Disk"  is one of the best performance destroyer , that you can get in enterprise environment.

     

    VSE is not able to distinguish 'removable'- drives from local drives.

    Every small implemantation in C++/C# would recognize removable drives, but not VSE !!!

     

     

    C#

    --------------------

    DriveInfo[] drives = DriveInfo.GetDrives();

    foreach (DriveInfo drive in drives )

    {

       if( drive.DriveType == DriveType.Removable )

       {

          //do your processing here.

          // Console.WriteLine("USB Laufwerksbuchstabe: {0}", drive.Name);

       }

    }

1 2 Previous Next

More Like This

  • Retrieving data ...

Incoming Links

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points