關於微軟OneCare的 Command-line Scanner的問題 Escalation Team的人給我的回覆

2008-02-25 19:20:39 / 個人分類：addoption

我的問題是問及 何時可以使用OneCare的 Command-line Scanner(OneCareScanner.exe)

因為在正常模式下不能用


QUOTE:

The only time that you can use OneCareScanner.exe is when you are on safemode. Once in safemode you would need to run a set of command lines on Command Prompt to initialize the scanning. Its not a bug, since it was designed as a command line utility specifically to run on safemode.


Here are some steps if you need to use the SafemodeAVScanner (OneCareScanner.exe):


1. Boot the Computer to safemode.

a. To boot the system to safemode keep hitting F8 after the restart of the computer and after you see the POST screen of the BIOS.

b. On several OEM machines the keys are different it might be F9 or F11 but normally it should be F8.

2. Once in safemode open a command prompt window by going to Start then RUN and type in CMD then hit OK.

3. The command prompt should appear. On command prompt type in these commands hit enter after every command line:

a. CD\

b. CD Program Files

c. CD *live

d. safemodeavscanner -s -h -b

4. The final command would initialize a full system scan. IF the scanner finds any Malware after it ran the scan it should present several options to take on how to remove them.


我感覺有些無言...只能在 Safe mode下用

真是沒想到的..... 他有一個OneCareScanner.exe,和一個SafemodeAVScanner.exe


看他回的，這兩個似乎都沒什麼分別吧


論壇模式 推薦 收藏 等級(0) 編輯 管理 查看(769) 評論(13)

TAG: addoption

andy的個人空間 andy 發佈於2008-02-27 17:47:06

QUOTE:

原帖由 000110 於 2008-2-27 17:41 發表

大大誤會了小弟的意思了
小弟是想說
把OneCareScanner.exe整合到MsMpEng.exe這裡


如果是引擎的版本或許舊了點
小弟的用的是1.5.1994
1.1.3301.0 是 08年2月15日的(mpengine.dll)

VirScan 用的是舊版引擎，呵呵~~

難道真的是獨立提供的內部版?

還是他們以別的方法來使用...

[ 本帖最後由 andy 於 2008-2-27 17:49 編輯 ]
000110的個人空間 000110 發佈於2008-02-27 17:41:59

QUOTE:

原帖由 andy 於 2008-2-26 20:32 發表

OneCareScanner.exe 是 OneCare 其中的一部份啊
OneCare 內就有 OneCareScanner.exe 的
大大誤會了小弟的意思了
小弟是想說
把OneCareScanner.exe整合到MsMpEng.exe這裡

QUOTE:

原帖由 andy 於 2008-2-27 17:23 發表

是引擎版本

1.1.3204.0
看來應該是引擎的版本了
Virus and Spyware Versions: AV Delta:(1.29.7101.0), AV Base:(1.29.7100.0), AS Delta:(1.29.7101.0), AS Base:(1.29.7100.0) AM Engine:(1.1.3301.0), AM Product:(1.5.1944.0)

[ 本帖最後由 000110 於 2008-2-27 17:46 編輯 ]
andy的個人空間 andy 發佈於2008-02-27 17:23:51

QUOTE:

原帖由 000110 於 2008-2-27 17:06 發表
VirScan及VirusTotal 用的版本 (1.3204/1.3301)真不知是哪裡來的
既不是OneCare的版本(2.5.00.12), 又不是特徵碼的版本(1.29.XXXX)
是引擎版本

1.1.3204.0
000110的個人空間 000110 發佈於2008-02-27 17:06:42
VirScan及VirusTotal 用的版本 (1.3204/1.3301)真不知是哪裡來的
既不是OneCare的版本(2.5.00.12), 又不是特徵碼的版本(1.29.XXXX)
andy的個人空間 andy 發佈於2008-02-27 16:57:07
剛看了一下

VirScan 也加入了 M$的引擎
Microsoft America 1.3204

不過OneCare 應該還沒有Linux版吧

那VirScan 和 VT 的 難道是傳說中的內部版
andy的個人空間 andy 發佈於2008-02-26 20:32:37

QUOTE:

原帖由 000110 於 2008-2-26 19:41 發表
不是整合在WLM內
而是整合在OneCare的主程式內
OneCareScanner.exe 是 OneCare 其中的一部份啊
OneCare 內就有 OneCareScanner.exe 的
000110的個人空間 000110 發佈於2008-02-26 19:41:32
回復 7# 的帖子
不是整合在WLM內
而是整合在OneCare的主程式內
andy的個人空間 andy 發佈於2008-02-26 19:32:29

QUOTE:

原帖由 000110 於 2008-2-26 18:54 發表



OneCare的結構真是繁複
結Windows Live Messenger使用的何不整合在主程式內
整合在 WLM內，又要連庫，一般用使者不喜歡這樣或者不喜歡OneCare，使用者有權自訂吧

二來可能會被人又說 壟斷
000110的個人空間 000110 發佈於2008-02-26 18:54:09

QUOTE:

原帖由 andy 於 2008-2-26 17:42 發表
再加一些回覆

Boots(版主):




Aiscer:


Boots :


一個for safe mode, 一個for Windows Live Messenger，....汗
OneCare的結構真是繁複
結Windows Live Messenger使用的何不整合在主程式內
andy的個人空間 andy 發佈於2008-02-26 17:42:25
再加一些回覆

Boots(版主):

QUOTE:

I just had a look in the OneCare program folder and noticed that there are indeed two different scanners, one being the OneCareScanner.exe, which I had not noticed before. I don't know why it exists along with the SafeModeAVScanner.exe file.

As far as I knew, the second one is the one to use in Safe Mode - http://forums.microsoft.com/Wind ... 215336&SiteID=2

I don't know why the other exe exists or what it does as there is no command line scanning in normal mode.

I'll see if I can get some details.

QUOTE:

You're welcome. I can't say if this will be provided with OneCare. I can see how some would want this functionality, but the inclusion of the Safe Mode scanner was done quietly and without announcement some time back. It wouldn't surprise me to see command line scanning available and that may be what that other exe is for. I don't expect the OneCare team t let me know of future plans, by the way.
Aiscer:

QUOTE:

As far as I know these two executable files are needed to run the scanning at safemode. I checked the description of both of these files. For OneCareScanner.exe: Windows Live OneCare CommandLine Antivirus Scanner and for SafeModeAvScanner.exe: Windows Live OneCare Safe Mode Antivirus Scanning Utility.



Out of curiosity, I deleted the OneCareScanner.exe executable and initiated a scan in safemode it did not affect the scanning in any way. I maybe wrong in assuming that the OneCareScanner.exe is one of the files that can be utilized by the SafeModeAVScanner.exe just like a batch file which can call on another batch file as an example. I also tried scanning in normal mode without the OneCareScanner.exe and it did not affect the scanning of OneCare (Quick scan, Complete scan and Custom). Also in Tune-up it did not seem to affect the scanning.



The OneCareScanner.exe might prove to have either a different functionality during scanning in safe mode or scanning with OneCare on normal mode. For a 24kb file it may have a good purpose since its part of the AntiMalware component of OneCare. I agree with Steve, we can't be exactly sure of what it does until we can get someone from the OneCare team to let us know its definite purpose.
Boots :

QUOTE:

I asked the OneCare team about the OneCareScanner.exe and learned that it is there for use by Windows Live Messenger exclusively.
一個for safe mode, 一個for Windows Live Messenger，....汗

[ 本帖最後由 andy 於 2008-2-26 17:44 編輯 ]
andy的個人空間 andy 發佈於2008-02-25 20:53:37

QUOTE:

原帖由 000110 於 2008-2-25 19:47 發表
沒有試過在SafeMode下執行OneCare的Command Line Scanner

不過, 在回覆中看到, OneCare不像Kaspersky 等防毒公司, 可以執行圖形界面(gui)的程式, 對使用耆來說是一個不便之處
不理他是有意還是無意這樣做了了

沒開放出來是事實，他們要弄到支持Normal mode應該是很容易的
000110的個人空間 000110 發佈於2008-02-25 19:47:10
沒有試過在SafeMode下執行OneCare的Command Line Scanner

不過, 在回覆中看到, OneCare不像Kaspersky 等防毒公司, 可以執行圖形界面(gui)的程式, 對使用耆來說是一個不便之處
andy的個人空間 andy 發佈於2008-02-25 19:33:19
不知道在用OneCare的朋友有沒有這個同樣情況呢?
我來說兩句

(可選)

Open Toolbar