Virus Scanner Configuration

1. Overview
2. Creating a New Definition
3. Testing the Definitions
4. Virus Scan Options
5. Supported Scanners
   1. AVG
   2. Eset
   3. Vipre
6. Community Supported Definitions
7. Document Revision History

Overview

The Virus Scan configuration screen lists all current antivirus definitions.  This allows LabTech to identify the virus scanner installed on the computer and sets the command line scanning and definition update procedures. 

To access the current virus scan definitions, select Dashboard > Config > Configurations > Virus Scan from the Control Center.

Figure 1: Virus Scanner Definitions

Table 1: Virus Scan Field Descriptions

Creating a New Definition

Creating a new definition is easy.  For your new definition, you will need to know the location to the virus scanners.exe and the location of the virus definition file\registry entry. 

To add a new definition:

1. From the Control Center, select Dashboard > Config > Configurations > Virus Scan.
   Figure 2: Virus Scan Configuration
   
2. Click the Clear button to clear any current data. 
3. Enter the Name of the virus scanner (e.g., Vipre)
4. Enter the command line scanning parameters if the scanner supports it, in the Scan Template field. Leave blank if the scanner does not support command line scanning.  %p is replaced with the file to be scanned. (e.g., /scannowquick %p).  Each antivirus uses different scanning parameters if it is supported.  You will need to refer to the appropriate antivirus documentation for the scanning parameters.
5. Enter the AP Process to look for.  If this process name is found running, then AutoProtect is assumed to be enabled.  WMI is queried last in the AutoProtect scan.  This means that if 'Auto Protect' is turned off in your Security Center from the Windows Control Panel, it might show as 'disabled' in the control center's computer management window.  To override this function, add an * at the end of the AP Process name.  This will skip the WMI scan.

   ---

   NOTE: The AutoProtect Process can also be a list of processes to look for.  Separate the processes with a colon (:) and as long as one of the processes is running, then it will detect it.

   ---

6. Virus definitions are not universal and require the location of the scanner to be static.  Enter the Program Location.  (e.g., %programfiles%\Sunbelt Software\VIPRE\sbamcommandlinescanner.exe).
7. Enter the Definition Location (e.g., %programfiles%\Sunbelt Software\VIPRE\Definitions\ctid.vtd).
8. Enter (.*) as the Date Mask. This is a universal value to determine the latest definition date of the file specified in the Definition Location. 
   

   ---

   NOTE: You can also use the Registry to get the date by just specifying a registry key and not a file path. The Date Mask is a regExpression used to help parse the date from the registry.

   ---

9. Enter the path and filename to the virus scanner's command line update in the Update Command field. Leave blank if a command line update is not available (e.g., %programfiles%\Sunbelt Software\VIPRE\sbamcommandlinescanner.exe /updatedefs). 
10. Select the OS that this antivirus applies to from the OS Type drop-down (e.g., 32 bit Windows, 64 bit Windows).  This allows for different data definitions for 32bit and 64 bit operating systems.
11. Version Check and Version Mask will already be populated based on internal detection processes to verify the operating system.  If it is blank, theVersion Check and Mask are not currently used in determining the version of the specified antivirus product.
12. Click Add if adding a new definition or Save if editing an existing definition.

Testing the Definitions

1. From the Control Center, select a Client > Location > Computer.
2. Click on the CMD Prompt tab.
   Figure 3: CMD Prompt
   
3. Use the ECHO and DIR command to return the result from your definitions.  Refer to the following examples:

• ECHO %programfiles%\Sunbelt Software\VIPRE\sbamcommandlinescanner.exe
• DIR %programfiles%\Sunbelt Software\VIPRE\sbamcommandlinescanner.exe
• ECHO %programfiles%\Sunbelt Software\VIPRE\Definitions\ctid.vtd
• DIR %programfiles%\Sunbelt Software\VIPRE\Definitions\ctid.vtd

These should all succeed and return relevant values.  The file date of the definition file is the date that is used for the definition date. 

NOTE:You can also use the Registry to get the date by just specifying a registry key and not a File Path. The Date Mask is a regExpression used to help parse the date from the registry

Virus Scan Options

Table 2: Virus Scan Options

Supported Scanners

Several versions of each antivirus program are supported.

AVG

LabTech SUpports Several versions of AVG out of the box.

• AVG 2011 Free & Commercial
• AVG 9.0 Free & Commercial
• AVG 8.0 Corporate
• AVG 8.0 Free & Commercial
• AVG 7.0 Corporate & Professional
• AVG 7.0 Free

Get the free copy from AVG.com. For installation instructions, please see the AVG Installation Guide.

Eset

ESET NOD32 Antivirus provides fast, light and proactive protection against viruses, trojans, worms, hackers and other cyber threats.

For installation instructions, please see the ESET Installation Guide.

Vipre

VIPRE Antivirus is high-performance antivirus software that doesn't slow down you PC like older, traditional security products.

For installation instructions, please see the Vipre Installation Guide.

Community Supported Definitions

• Avast
• Avira
• BitDefender
• Etrust
• F-Prot
• F-Secure
• Kaspersky
• McAfee
• Microsoft
• Norman
• Norton-Symantec
• OneCare
• Panda
• Sophos
• Trend

Document Revision History