Sunday, January 1, 2012

ESET NOD32 Anti Virus Auto Scan Flash Drive

Computers can be infected with the virus in two ways
1. Infected from the internet
2. Infected from the external device (flash drive, micro SD, which is infected)

We never know, flash drives other people coming into our computer, clean from virus or not. ESET auto scan function, to protect the computer, so as not infected with a virus from a flash drive.

ESET NOD32 command line scan (ecls.exe)

Ecls.exe file, located in 

C:\Program Files\ESET\ESET Smart Security or 
C:\Program Files\ESET\ESET NOD32 Antivirus directory.Command line scanning is useful if your computer is currently operational only in Safe Mode or if you are a network administrator and wish to initiate scanning from an external application.

ESET Command Line Scan there are several parameters that we can use.
ESET Command Line Scanner Parameters (3.0) and
ESET Command Line Scanner Parameters (4.0)

Sources: ESET Knowledgebase

Table. ESET Command Line Scanner Parameters 4.0

Example : Scan using the Command Line Parameters
"c:\Program Files\ESET\ESET Smart Security\ecls.exe" /base-dir="c:\Program Files\ESET\ESET Smart Security" /auto /log-file=c:\ecls.txt /aind
C:\Program Files\ESET\ESET Smart Security\ecls.exe /adv-heur /heur /rtp /quarantine /action=clean /log-file=log.txt

Based on ESET Command Line Scanner Parameters, we will be setting up the ESET anti-virus auto scan

ESET NOD32 Anti Virus Auto Scan Flash Drive

1. Disable Auto Play Windows
When the flash drive is inserted, Windows Auto Play menu appears. To prevent virus infection, auto play menu should be disabled. Auto play windows, used a virus, as the entrance to the computer.

Turn off auto play for Windows XP
Press START - Run - regedit - HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer - NoDriveTypeAutoRun - Value Data - Type = 4


Turn off auto play for Windows Vista and 7
Press "START" - Control Panel - Hardware and Sound - Auto play - uncheck "Use Autoplay for all media devices" - SAVE.

To disable the Windows AutoRun, a more complete discussion can be found here
Disable autorun Windows more selective and specific (for Win 2000, XP, Server 2003, Server 2008 and Windows Vista)

2. Download and instal software USB Safely Remove (support Windows 2000\XP\2003\Vista\7)

3. After install finish, open USB Safely Remove >> View >> Options

4. Select Global Autorun >> After device plugging >> Add process to launch list

5. On menu File name and parameters, select Search file

6. Open directory C:\Program Files\ESET\ESET NOD32 Antivirus\ >> select ecls.exe >> Open

7. Double click The drive letter, to add parameter %DriveLetter%

8. Add the parameters of the tab "File name and parameters", writes
/log-file=c:\report.txt /log-rewrite /aind   >>  OK

9. Then, click Add process to launch list

10. Add the parameters of the tab "File name and parameters", writes
C:\report.txt  >>  then, remove the check on menu "Wait for the process to finish" and "Launch the process for drives only"  >>  OK

11. Press OK to Finish


The first command
"C:\Program Files\ESET\ESET NOD32 Antivirus\ecls.exe" %DriveLetter% /log-file=c:\report.txt /log-rewrite /aind

"C:\Program Files\ESET\ESET NOD32 Antivirus\ecls.exe"
Location of file ecls.exe, C:\Program Files\ESET\ESET NOD32 Antivirus\ecls.exe

Location of flash drive. Location of USB flash each computer is different, %DriveLetter% means adjusting the location of the drive computer

/log-file=c:\report.txt (log output to file)
ESET requested, report the results of virus scan. File a report of a virus scan, stored on drive C, with the name report.txt

/log-rewrite (overwrite output file, default - append)
Each flash drive is inserted, a virus scan results report, to be rewritten. So reports the results of scans of the old flash, is not shown again, doesn't remove the old reports, and rewrite it with a new report

/aind (show activity indicator)
Showing the virus scan process. So, virus scan will be displayed

The second command
After scan is complete, we ask to open virus scan report.

To check, insert flash drive and wait. ESET NOD32 Anti Virus, automatically scan flash drives, and display reports of virus scan. After virus scan is complete, we can open flash drive safely, without fear of virus infection. Thanks.

Download ESET NOD32 Anti Virus