Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: brockey01 on April 02, 2008, 04:25:34 AM
-
how deep does this scan scan things? does it use rootkit scanning also? just would like to know info on the quick scan for home. i have it schulded to run scans.
-
I don't think the quick scan includes a rootkit scan (it wouldn't really make much sense, provided it's meant as an Explorer extension to quickly scan single/few items).
Appart from that, it scans as deep as possible (regarding archive unpacking, file scanning, ...)
-
how would i get to to scan all archives? Thanks
-
how would i get to to scan all archives? Thanks
Start avast antivirus, choose the area (disks, folders, etc.) to be scanned, set the scanner to scan archives.
-
how would i get to to scan all archives? Thanks
Start avast antivirus, choose the area (disks, folders, etc.) to be scanned, set the scanner to scan archives.
We are talking ashQuick.exe here Tech or at least that is what the topic is.
@ brockey01
The ashQuick.exe scan is the most thorough of scans it scans all files (unless user exclusions made) and that includes archives, those that avast can extract that is.
-
can i set it up to do a rootkit scan? i heard you can or change seting by editing a XML file. can that be done? also does ashquick scan memory to? can it be set or have the file edited to scan thoses also?
Thanks
-
The basic ashQuick.exe doesn't scan memory, unless you run it from a command and have parameters, I can't remember the parameters, Tech probably has them filed away somewhere ;D
In the home version you haven't got a GUI means of firing the anti-rootkit scan but it can be done by a run command, I can remember that ;D
avast! Rootkit Scan - Windows Start, Run and copy and paste this command (including the quotes, assumes that you installed avast in the default location) "C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "<RTK>SUPERQUICK" and click OK.
-
can i set it up to do a rootkit scan? i heard you can or change seting by editing a XML file.
Only in Professional version you can configure it.
also does ashquick scan memory to?
Sure.
Run "C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*STRT-MEM-SHORT"
Which should be equivalent to the initial memory scan.
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*MEMORY"
-
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "<RTK>SUPERQUICK"
It does not worked to me:
1. In a common user cmd: error found.
2. In an elevated (admin) cmd: engine does not start ???
-
1. it indeed requires elevation
2. you mean like this window never goes away? (initializing engine)
-
2. you mean like this window never goes away? (initializing engine)
Yes.
-
You can create a dump of ashQuick.exe so that we can see what's going on. ;)
-
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "<RTK>SUPERQUICK"
It does not worked to me:
1. In a common user cmd: error found.
2. In an elevated (admin) cmd: engine does not start ???
It works for me in XP Pro, admin rights, it launches ashquick.exe and starts the rootkit scan, which promptly fails, as expected, because I'm using FAT32 format. I had to put " quotes " around the path to ashquick.exe because of the spaces program files for it to work for me, you could try removing the quotes in the path.
I believe Vlk/Igor are still working on the FAT32 problem with the aswar scan.
-
You can create a dump of ashQuick.exe so that we can see what's going on. ;)
If I'm correct, just start the elevated cmd, run ashquick with parameters and then generate a dump, is it?
-
you could try removing the quotes in the path.
The program starts correctly, problem is elsewhere.
-
Bad news...
Dumping process 4140 (ashQuick.exe) to
E:\ashquick.log...
The process could not be dumped.
Access denied.
-
The self-defence has to be disabled first...
-
Anyway, the didi you use the quotes around <RTK>SUPERQUICK?
They must be there.
-
The self-defence has to be disabled first...
Done. I'll sent it by email to Vlk.
Anyway, the didi you use the quotes around <RTK>SUPERQUICK?
They must be there.
Yes, I use them.
-
ok i have one last question, does anyone know how to create a Batch file for windows that automates a memory scan, then full scan with ashquick for home ed? is so could someone post a working code for the batch file. you could do the memory scan using windows command prmpt and such. ideas would be nice to hear.
Thanks for the helps everyone.
-
ok i have one last question, does anyone know how to create a Batch file for windows that automates a memory scan, then full scan with ashquick for home ed?
Sure.
Run "C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*STRT-MEM-SHORT"
Which should be equivalent to the initial memory scan.
or
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*MEMORY"
-
Thanks thats alot of help.
-
What other scans can be added to the batch file thats used with ashquick?
also if any others what are there coommands.
Thanks Tech. :)
-
What other scans can be added to the batch file thats used with ashquick?
also if any others what are there coommands.
http://forum.avast.com/index.php?topic=3796.msg27225#msg27225
-
ok i have one last question, does anyone know how to create a Batch file for windows that automates a memory scan, then full scan with ashquick for home ed?
Sure.
Run "C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*STRT-MEM-SHORT"
Which should be equivalent to the initial memory scan.
or
"C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "*MEMORY"
i setup a batch file but it just flashes and disappers does it work?
-
avast! settings / Common / Show results of Explorer Extension
-
are there any arguments that can start a rootkit scan?
-
are there any arguments that can start a rootkit scan?
Yes, "C:\Program Files\Alwil Software\Avast4\ashQuick.exe" "<RTK>SUPERQUICK" as I mentioned in reply #6, http://forum.avast.com/index.php?topic=34320.msg287728#msg287728 (http://forum.avast.com/index.php?topic=34320.msg287728#msg287728).
i setup a batch file but it just flashes and disappers does it work?
Try first opening up a command window, windows, start, run, type cmd and run the command, the cmd window won't close so you will be able to see any error messages and hopefully find out why it didn't run. The reason I say that is you would see some avast activity and it would take a short time.
-
Anyway, the didi you use the quotes around <RTK>SUPERQUICK?
They must be there.
Strange, now I'm receiving a new error, mixing English and Portuguese terms.
Disabling or enabling the self-protection module does not make any difference in this case... ???
-
What does the message mean in English?
-
Is there the file aswar0.dll (maybe even aswar1.dll) in your <avast>\Data folder?
Would a restart help? (maybe copy the mentioned file somewhere first)
-
Vlk, Something like: it was made a tentative to load (or run) a program with an incorrect format.
Igor, no I don't have any aswar?.dll file in any of my <avast> subfolders.
-
I also have this file in the same location. Wondering what it is.
Comodo Firewall v3 does not recognise it, and seems that neither do you experts, so not sure what to do.
Perhaps to rename it as aswar0.old and see what happens? :-\
-
Why do you think we don't recognize it?
We sure do - it's a part of the avast antirootkit module.
:)
-
I just went into Explorer to go and rename and what description did I see? "avast anti-rootkit module" !!!! ;D
Good job that I did not rename it :-[