Aaron P Posted August 4, 2004 Share Posted August 4, 2004 I need some help which will require a small amount of your valuable time, to compile a list of AntiVirus application EXE names for a project that I am working on. What I need is the name of the main executable that is running in memory for whatever anti-virus application you have installed on your workstation. For example Symantec AntiVirus has a service named 'Symantec AntiVirus'. To view the executable name for this service you can open Services from Administration Tools, double click on the Symantec AntiVirus service and on the General tab the EXE name for the service is displayed: "C:\Program Files\Symantec AntiVirus\Rtvscan.exe". You can then see this EXE running in memory in Task Manager (it will list RTVSCAN.EXE) I have compiled a very short list thus far: RTVSCAN.EXE=Symantec AntiVirus PCCNTMON.EXE=Trend Micro OfficeScan ASHSERV.EXE=avast! Antivirus I need others such as Norton AntiVirus, Trend PC-Cillin, McAfee and whatever else is out there. I'd be greatly appreciative of whatever you could check out and post back for me. Thanks in advance, Aaron Link to comment Share on other sites More sharing options...
Kasteo Posted August 4, 2004 Share Posted August 4, 2004 AVG 7.0 Network Edition : AVGCC.EXE(Control Center), AVGAMSVR.EXE(Alert Service) Link to comment Share on other sites More sharing options...
hurting101 Posted August 4, 2004 Share Posted August 4, 2004 AVG 6 Free service = avgserv.exe AVG 6 Free control centre = avgcc32.exe Link to comment Share on other sites More sharing options...
Aaron P Posted August 4, 2004 Author Share Posted August 4, 2004 Thanks Link to comment Share on other sites More sharing options...
twiglet Posted August 4, 2004 Share Posted August 4, 2004 hmmm, you making some sort of trojan that kills those processes? Link to comment Share on other sites More sharing options...
Aaron P Posted August 4, 2004 Author Share Posted August 4, 2004 No, Windows 2003 Network Access Quarantine script, check to make sure that these processes are running. Output looks like this: Link to comment Share on other sites More sharing options...
jamesas Posted August 4, 2004 Share Posted August 4, 2004 whats that thing in that pic i want it Link to comment Share on other sites More sharing options...
Piepke Posted August 4, 2004 Share Posted August 4, 2004 Looks like a nice project you have there, good job Link to comment Share on other sites More sharing options...
gazebee_ Posted August 4, 2004 Share Posted August 4, 2004 u work for Microsoft or wut? Link to comment Share on other sites More sharing options...
Aaron P Posted August 4, 2004 Author Share Posted August 4, 2004 @jamesas: you want what exactly? @Pierreken: thanks @gazebee2001: No, I don't work for Microsoft or wut.. Link to comment Share on other sites More sharing options...
John Veteran Posted August 4, 2004 Veteran Share Posted August 4, 2004 Hahaha, nice :cool: I like that (Y) Link to comment Share on other sites More sharing options...
acedriver Posted August 4, 2004 Share Posted August 4, 2004 F-StopW.exe = F-Prot Antivirus Link to comment Share on other sites More sharing options...
tsutton Posted August 4, 2004 Share Posted August 4, 2004 No, Windows 2003 Network Access Quarantine script, check to make sure that these processes are running. Output looks like this: Are you aware that these icons are copyrighted to Microsoft? If you decided to put it up for public downloads, you need to be aware about it. Link to comment Share on other sites More sharing options...
jamesas Posted August 4, 2004 Share Posted August 4, 2004 what i was saying is i want what eva that program is that you had a screenie of Link to comment Share on other sites More sharing options...
Aaron P Posted August 4, 2004 Author Share Posted August 4, 2004 @acedriver: thank-you @jamesas: do you have a Windows 2003 PN server? If not, it's not going to do you any good. Link to comment Share on other sites More sharing options...
jamesas Posted August 4, 2004 Share Posted August 4, 2004 i have windows 2003 enterprise edition whats pn Link to comment Share on other sites More sharing options...
Aaron P Posted August 5, 2004 Author Share Posted August 5, 2004 Oops, I meant VPN - Virtual Private Network Link to comment Share on other sites More sharing options...
jamesas Posted August 5, 2004 Share Posted August 5, 2004 oh ok well any way can you just tell me what it is and how to get it Link to comment Share on other sites More sharing options...
mAcOdIn Veteran Posted August 5, 2004 Veteran Share Posted August 5, 2004 Mcshield.exe = Network Associates(McAfee) Virus Scan Enterprise 8 (and probably 7 as well) Link to comment Share on other sites More sharing options...
Aaron P Posted August 5, 2004 Author Share Posted August 5, 2004 It is a VBScript script that runs a number of checks against your computer when you make a VPN or dialin connection to a Windows Server 2003 RRAS machine, the cscript checks for things such as Windows version, Service Pack, hotfix installation and anti-virus applications (and hopefully virus definitions some day) and outputs the results to Internet Explorer as shown. The result is then sent to the quarantine server and your computer is taken out of quarantine and is able to access the rest of the network. and you can't have it. As an alternative, Avanade are making some similar which is written in .NET and is much better anyway: http://www.avanade.com/. See VPN Quarantine on the front page. Link to comment Share on other sites More sharing options...
Aaron P Posted August 5, 2004 Author Share Posted August 5, 2004 Thanks mAcOdIn Link to comment Share on other sites More sharing options...
Aaron P Posted August 6, 2004 Author Share Posted August 6, 2004 Anyone else got more AV EXE names? I've got this so far: RTVSCAN.EXE=Symantec AntiVirus PCCNTMON.EXE=Trend Micro OfficeScan ASHSERV.EXE=avast! Antivirus AVGCC.EXE=AVG Anti-Virus 7 Network Edition AVGCC32.EXE=AVG Anti-Virus 6 F-STOPW.EXE=F-Prot Antivirus MCSHIELD.EXE=McAfee Virus Scan Enterprise Link to comment Share on other sites More sharing options...
Recommended Posts