Endpoint Protection

 View Only
  • 1.  Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 10:45 AM
    I have a C# application that needs a way to start scans on certain locations.

    I see that Explorer has a way to right click folders and initiate a scan - how can I trigger the same thing programmatically?

    We are using Symantec Antivirus 9.0.

    Any advice at all will be greatly appreciated.


  • 2.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 10:52 AM

    Just to clear a few things up. Scheduling scans is not an option. Automatic protection is disabled.

    The scan has to be user initiated and the user is unable to directly access the drive/data/etc - meaning he cannot right click.

    In short - I need a "Scan Drive" button in my application that will do the same thing as right click "Scan for viruses"


  • 3.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 11:01 AM
    SAV 9 is not designed to integrate with other applications they way you are describing. You should be looking at our Scan Engine to work with your application.



    Key Features

    • Easily integrates with third-party software and hardware via version 1.0 of the ICAP protocol or the provided client-side API.
    • Includes content scanners such as Symantec AntiVirus, spyware and URL filtering technologies.
    • Very high performing and scalable.


    http://www.symantec.com/business/scan-engine


  • 4.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 11:13 AM

    Oh I wish I had that much flexibility. Unfortunatley I'm stuck with the tools I got . This is for a mil system for which the software that is deployed is set in stone.  Hence the 2004 dated AV software running on 2000/XP.

    I know of tools like SAVSECLS.exe - but that doesn't seem to come with Symantec AntiVirus 9.0.

    My point is, that there is clearly a way for me to trigger the scan since Explorer is able to do it. So there is a way for me to pass parameters to the AV software. I just don't know the syntax...


  • 5.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 11:19 AM

    BTW, the SAV 9 is EOL. You should be upgrading to the newest SAV 10.1.9 (2000/XP) to keep your protection up to date.

    Symantec Antivirus 9.x will reach its End of Support Life as of March 31, 2009. Virus definition updates for version 9.x will be discontinued on April 1, 2009. Please contact your account manager or reseller for information about our current shipping versions.

    http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce


  • 6.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 11:33 AM
    You're missing the point. This is a military system. We cannot change the software easily (as in at all really).

    Virus defenitions are still being provided by the DoD. EOL according to Symantec is not a concern.

    At BEST I may be able to get SAV 10 on the XP systems, but 2000 are still running 9 and will do so until the EOL of the 'system' itself which may be 2012-2015.

    The only problem I have is that I cannot call the scan from my application. There is a 3rd party tool called vpscan.exe which seems to be able to start scans. Unfortunatley using it as a means of starting scan isn't an ideal option as that's another .exe to get authorized for the system. Yet the fact that it exists clearly indicates that there is a way of starting scans - I just don't know what it is.



  • 7.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 13, 2010 11:37 AM

    I understand, I just wanted you to be aware of the product EOL status.

    Best,
    Thomas


  • 8.  RE: Triggering a drive/folder scan programmatically.

    Posted Jul 15, 2010 04:53 PM

    How about creating a batch file utilizing vpscan.exe?  You can check on the location of the .exe and the flags it uses at the following link.
    http://service1.symantec.com/SUPPORT/ent-security.nsf/0/7fce382ff2eacc1288256c4d0050c605?OpenDocument