IDEA: Symantec anti-virus auto-updater

[Josh]

Well, to each their own, its plenty for me. Hourly updates are for the overly paranoid. I've never seen symantec not release an update as soon as its ready when a virus comes out. No viruses have gotten through on me yet, so I have no reason to distrust them

[Carol Haynes]

Symantec generally issue updates on a fixed regular basis (can't remember the details as I haven't used their products for a couple of years) - they do however respond to serious threats with immediate updates.

[MikeMM]

Thanks Skrommel for the great software. I need some help and a question.

- How to set DownloadAndRun.ini to download & unpack ''hidden'' a Trend Micro pattern file, i mean to unpack, replace and delete the old lpt.zip file but the unpack process to be not seen ?


This is how the .ini file looks until now:

[Settings]
traytip=1
url=http://www.trendmicro.com/download/viruspattern.asp
filename=http*lpt
downloadpath=Download
action=Run

Sorry for my bad english and thanks again.

[Wordzilla]

I use symantec antivirus corporate edition, and while it is (imho) a great anti-virus, its liveupdate definitions are only posted every few days. I do know that symantec posts daily updates (manually downloadable executables). What I would like is an app that will load

http://www.symantec..../pages/US-SAVCE.html

and scan for the executable link, download the file, run it, and delete the file, all automatically. Is this possible? Sounds like a perfect AHK script Perhaps even have an option to configure how often (since symantec posts multiple updates per day).

-Josh (May 22, 2006, 04:54 AM)

I don't think the symantec antivirus corporate edition is good enough for your security. Back in my old university, around 80% of all students used it since it was a legal free download from the school website, and it updates itself daily and automatically from fast intranet school servers. However there were always many complains about the anti-virus - it simply didn't provide any effective protection in many many virus cases, the viruses just went through the shield and you wouldn't suspect it until you got Ad/porn pop-ups, a hijacked browser or BSOD, etc.

Fortunately, the school board decided to provide Kaspersky a couple of months ago, AFAIK.

I always volunteer to help virus victims if I can, and I did helped a lot of people (mostly my school mates), and from my experience, I'd prefer to say if you are using a Symantec anti-virus product and are contented with it - please think twice, especially if you just have a Symantec anti-virus working without any anti-spyware program.

More than 95% of the computers that had symantec antivirus corporate edition installed (and mostly updated) that I have helped were infected by 10+ bad stuff (be it a virus, a trojan or spyware, etc. Unwanted Cookies NOT included)

The anti-virus program won't give you a warning message never means your system is safe. 

I used to use Mcafee Antivirus Enterprise 8.0i + Anti-Spyware Module 8.0 alone and the week before last I was infected by Malwarepipe (the most nasty malware I have ever got) and other 395 spyware (as reported). All Mcafee told me was that system infected by Puper (trojan) and nothing else. My Ad-aware SE free anti-spyware only reported a dozen cookies after a full system-scan.

And their definitions were ALL up-to-the-minute! 

I tried Spyware Doctor 3.8 after that and it reported 396 spyware and I instantly paid the company to get rid of all these nasty stuff for me.   

Before that I suffered from fake "critical system error" and "malware infection detected" pop-ups every 10 seconds and there were Ad/Porn pop-ups every 10 minutes or so. I couldn't even bring my laptop to school for that reason. 


I'm currently with Mcafee Antivirus Enterprise 8.0i + Anti-Spyware Module 8.0 and Spyware Doctor 3.8

[skrommel]

  MikeMM wrote

to unpack, replace and delete the old lpt.zip file

This is not supported by DownloadAndRun, but a simple AutoHotkey script should correct this. It uses the command line version of PkUnzip, downloadable from here: http://membrane.com/synapse/library/pkunzip.exe

[Select]

;Extract.ahk
; Checks if a file exist every minute, and extracts it
;Skrommel @2006

#Persistent

file=C:\Download\lpt.zip
dir=C:\Program files\Kaspersky

SetTimer,EXIST,60000
Return

EXIST:
IfExist,%file%
{
  RunWait,PkUnzip.exe -d "%file%" "%dir%",,hide
  FileDelete,%file%
}
Return

I'm also working on a more elaborate version of DownloadAndRun.

Skrommel

[skrommel]

  I actually forgot that there's more to the Run option in DownloadAndRun, it can run another tool.

Try this script instead:

[Select]

Run,PkUnzip.exe -d "downloaded file's path and name" "dir to extract to",,hide

(Change the above line to match your system)

Save it as Action.ahk, rightclick it and choose Compile Script to make  Action.exe.

Now update the ini-file to show action=Run Action.exe

Skrommel

[lanux128]

i'd like to adapt this script for AVG Free updates as well but needless to say, i was not successful...

this is because the download link is fused with javascript like this,
<a href="hxxp://free.grisoft.com/softw/70free/update/u7avi792qj.bin" onclick="return fc_click('dwn_u7avi792qj.bin','download')">u7avi792qj.bin</a>

so D+R tries to download this file: u7avi792qj.bin onclick=return fc_click('dwn_u7avi792qj.bin','download') and returns an error. therefore, i was hoping that you'd might be able to amend this script to get it working with AVG..

[lanux128]

it's not like Skrommel to be away from coding for so long.. has anyone else noticed him? is he on a sabbatical? 

[mouser]

yeah, skrommel come back from vacation!!!
mesg him here: https://www.donation...ion=pm;sa=send;u=407

[lanux128]

i think of the same too.. isn't summer already over?
skrommel, the world is awaiting for your return!

[lanux128]

skrommel, would you happen to have some time for a quick fix to make this script work with AVG?