1 2 Previous Next 14 Replies Latest reply: Jan 16, 2013 10:34 AM by wwarren RSS

    Scan USBs

    nisreen

      Hi all,

       

      I would to ask if there is any scripts we can use to force scan the USB once it plugged to the computer.

       

      Please help me in this.

       

      Thanks alot,

        • 1. Re: Scan USBs
          hem

          If you have Autoplay enabled from GPO then when you plugin the USB sticks, VSE OAS will scan the files.

          • 2. Re: Scan USBs
            rmetzger

            Also, make sure that from the Control Panel:

            On-Access Scan Properties>All Processes>Scan Items>Scan Files

            Check "When reading from disk"

             

            Make the equivalent settings change from ePO if available.

             

            This will ensure that any file on the USB drive is scanned prior to execution (autorun or otherwise).

             

            In addition, make sure that from the Control Panel:

            On-Access Scan Properties>All Processes>Scan Items>Scan Files

            Check "When writing to disk"

             

            to ensure that files written to the USB drive are scanned during the write process.

             

            These 2 settings should protect against spreading virus' when keeping the signature files completely up to date.

             

            Hope this is helpful.

            Ron Metzger

            • 3. Re: Scan USBs
              petersimmons

              On Access Scanning will automatically scan any files touched on the device. You really don't want to scan a full USB drive when inserted. Keep in mind these drives now come in multi-terabyte size. Inserting a drive like this would take hours to scan (because USB is a slow interface). You realy don't want to do this. You'll already be covered with the OAS.

              • 4. Re: Scan USBs
                nisreen

                Thanks alot for your replay,

                 

                but On-access scan propeties >Scan Files "When writing to disk" is already checked and still am infected from the USBs it is not scanning the USB.

                How to make it available in the ePO.

                 

                Thanks alot,

                • 5. Re: Scan USBs
                  rmetzger

                  nisreen wrote:

                   

                  Thanks alot for your replay,

                   

                  but On-access scan propeties >Scan Files "When writing to disk" is already checked and still am infected from the USBs it is not scanning the USB.

                  How to make it available in the ePO.

                   

                  Thanks alot,

                  It's not enough 'When writing to disk' you need to do it 'When reading from disk'

                   

                  On-Access Scan Properties>All Processes>Scan Items>Scan Files

                  Check "When reading from disk"

                   

                  Make the equivalent settings change from ePO.

                   

                  Ron Metzger

                   

                  Message was edited by: rmetzger emphasis in quote. on 1/12/13 6:24:19 PM EST
                  • 6. Re: Scan USBs
                    petersimmons

                    Yes. You must scan "When Reading from Disk" all the time. If you aren't just go ahead and uninstall the software.

                    • 7. Re: Scan USBs
                      nisreen

                      "When writing from a disk" and "When reading from a disk" is already checked

                      Is there anything else to do?

                      • 8. Re: Scan USBs
                        xenon1

                        ... to activate "When reading from Disk"  is one of the best performance destroyer , that you can get in enterprise environment.

                         

                        VSE is not able to distinguish 'removable'- drives from local drives.

                        Every small implemantation in C++/C# would recognize removable drives, but not VSE !!!

                         

                         

                        C#

                        --------------------

                        DriveInfo[] drives = DriveInfo.GetDrives();

                        foreach (DriveInfo drive in drives )

                        {

                           if( drive.DriveType == DriveType.Removable )

                           {

                              //do your processing here.

                              // Console.WriteLine("USB Laufwerksbuchstabe: {0}", drive.Name);

                           }

                        }

                        • 9. Re: Scan USBs
                          nisreen

                          Hi Xenon,

                           

                          where to use theis implementation.

                          1 2 Previous Next