9 Jan
When you’re infected by persistent virus like Brontok, you’d be frustrated if the installed Anti-Virus program on your computer is unable to clean it. So how to scan computer using more than 1 type of antivirus? Is the only solution to uninstall the current antivirus program and then install another one? Fortunately not, here’s how you can scan your computer with 4 types of Anti Virus program without installing them.
Multi AV Scanning Tool by David H. Lipman is a malware removal utility incorporating multiple command line scanners including McAfee, Sophos, Kaspersky and Trend engines.

To perform a scan using these vendor’s scanners choose the number on the menu corresponding to the Anti Virus scanner you wish to run. The scripts will automatically obtain the Anti Virus vendor’s files for you. You don’t need to have them already resident on your computer. After the files have been downloaded to your computer and have been made ready to use, you will get a prompt if you want to run the scanner or not. If you do want to perform a scan then click on “Yes“, if you do not want to perform a scan (maybe you want to perform the scan in SAFE MODE) choose “No“. If you choose No or ignore the prompt it will return you back to the main menu. An example prompt for the Sophos scanner is shown below.

If you choose to perform a scan then you will be prompted to see if you want to perform the scan of a particular folder or location. An example prompt for the Sophos scanner is shown below.

If you choose “No” then the AV scanner will proceed to perform a scan of all hard disks on the computer. If you choose “Yes” then you will be prompted to type in the path of the folder or the drive to be scanned. The scanner will then proceed to perform the scan of that location and all folders below it. If the drive or folder does not exist (for example a syntax error is made in typing the folder location) you will again be prompted to type in the path of the folder or the drive to be scanned.
Sophos, McAfee and Kaspersky uses the same method above to ask you which location you’d like to scan but for Trend, it will automatically obtain the Trend Micro Sysclean utility and the latest Trend Pattern File. After the files have been downloaded to your computer and they have been made ready to use, you will see the following GUI utility.

By clicking on the “Advanced” button you can choose to scan a specified folder or drive. If it is not chosen then Sysclean will scan all hard disks.
Here is how to run Multi AV Scanning tool in your computer.
1. Download Multi_AV.exe from the link at the end of this article.
2. Run Multi_AV.exe (You must use the default folder C:\AV-CLS)
3. Run StartMenu.BAT or double-click on ‘Start Menu‘ shortcut from C:\AV-CLS folder.
There are two modes of operation: Remove/Delete and Detect Only. The software defaults to the Remove/Delete mode which means that any files that are deemed to be infected will be automatically removed from the system and can which can not be cleaned. If you desire to use the Multi AV Scanning Tool just to detect and not delete malware, you can hit the letter “D” and place the software in a Detect Only mode of operation. Those files found to be infected by malware will be logged but not cleaned nor deleted from the system. These two modes of operation are only for the McAfee, Sophos and Kaspersky modules since the Trend Micro Sysclean utility has a GUI selection for detection with or without file deletion.
Included in the C:\AV-CLS folder is a file called killproc.txt and is used to shutdown or kill running processes prior to scanning the platform. There are two processes already in the text file. iexplore.exe (Internet Explorer) and firefox.exe (FireFox).

You can add more file names in the text file making sure the last line is a blank line. You can also bring up the killproc.txt text file by hitting the “E” key in Multi-AV menu.
Multi AV Scanning Tool website no longer accessible but it’s still a very good free multiple antivirus program that can be used to scan and remove viruses.
Note: The directory C:\AV-CLS is hard coded and should not be changed. Multi AV should be used to remove an infection from your computer. They are not a replacement for realtime antivirus protection but they are an effective tool to remove malware (viruses etc.) from an infected machine where antivirus software is disabled, out-of-date or even if it is not installed at all.
[ Download MultiAV ]
[tags]multiav, sophos, trend, mcafee, kaspersky[/tags]
: Copying this article to your website is strictly NOT allowed. However, if you like this article, you can use the HTML code below to directly link to this article.
Easily Scan Suspicious File with 20 Malware Scanner Virus.org Offers Malware Scanning Service With Several AntiVirus Engines AOL Active Virus Shield is replaced with McAfee Virus Scan Plus Another Web Based Multi Engine Virus Scanner FREE GData BootCD 2010 Scans for Virus With Dual Antivirus Engine Avast and BitDefender Kaspersky Offers FREE Tool to Scan and Remove Virus Multiple Antivirus Software On Windows Computer
Have computer technical problems? Get FREE help from Raymond.CC FORUM
Hi All,
I have used this program as well since 2006, and I have to say that at no point has executing this program wiped out my PC. Furthermore, I have known David Lipman through usenet since 2004, and he is one of the best in alt.comp.virus.
With that said, this tool is great.
Regarding the claim that a hard-drive was systematically erased by this program, there are two possibilities:
1) It is either as David Lipman stated, that this is a complete fabrication, or
2) That a hard drive is wiped out by the bug that this program and its modules are intended to kill.
If the latter, than it would be nice to know exactly what bug is doing this, and if this is purely coincidental or if somehow David’s tool (or the AV tools bundled with it) are specifically being targetted by a virus/worm/other malware.
Thanks.
Once again, my previous posts are not any type of fabrication. All the things that I indicated happening, Happened! I don’t know know if it is some type of virus that is working in conjunction (and I am not implying “purposefully” I mean the virus maker set it up to do that when Sophos was initiated) or my system was completely infected (which I doubt) or it is just some anomaly with certain set-ups. Apparently it has happened to more than just me. I cannot vouch for the other posters but as this did in fact happen to me, I don’t think they are all just bashing the software. I am glad for everyone that has had success with Sophos and it does seem that it’s creator is a knowledgeable and respected technician. I had the disaster that I had and wanted some feed-back, answers and possibly some help, not just advertisements about how great Sophos is or utter denial that what happened to my computer had actually taken place.
Thank You
Hi,
My system is fully infected by newfolder and autopaly virus, i am uanble to buy paid antivirus softwares, is there any online scan sites, please give the details
Praveen
I’ve been an avid fan and user of Multi-AV for several years and have never encountered a single issue with the software erasing files from a hard drive. However there is one item persons claiming they’ve been the victim of this issue may not have considered. If a virus infects a file, the file may become deleted in the process of being “cleaned”. Hence if your system has become infected with a virus, designed to infect many files throughout your hard drive, then guess what may happen when you run an AV scanner? The result is that many files could become deleted. Of course if this issue were to occur, the log file created by the AV software should validate this action. In closing, and directed towards those who are claiming Multi-AV deleted the contents of their hard drive, you wouldn’t by chance still have the log file associated with the use of Multi-AV do you?
Hi
Would this tool only use those AV’s signature files database or does it use their hueristics as well ?
I’m not sure what happened exactly, but Multi-AV Scanning Tool deleted every file on my system drive! (excluding those in memory). It worked fine before.
The deletion just happened silently after I chose the Trend Micro. I don’t think there was even a process.
The first time it happened, I wasn’t even sure WHAT happened until it’s too late. Good thing I had a drive image. The second time I was prepared, and confirmed the culprit.
Luckily my data drive was never touched.
Will never touch it again *watches shredding progress*.
I would love to provide a log file, except it deletes itself first (and everything within its folder). Heck, when I chose Trend Micro, it didn’t even start scanning! It disappears and reappears when the wiping is done.
I completely agree with everyone’s statement on the danger of this software.
Another note, my computer is very clean. Not only is it pretty new, I’ve installed all sorts of protection since day one!
Examples: Sandbox, Limited Rights, Passive Cookies/Website/ActiveX Blockers, HIPS, Firewall, On-demands, Backup, Firefox Add-ons, Software Restriction Policy, etc.
Everything is on different layers, and are regularly updated. I’ve scanned with all sorts of programs (ex: A-squared, Avira, Avast, Hitman Pro, Malwarebytes’, SUPERAntispyware, Spybot, Ad-Aware, Spyware Doctor, Norton Security Scan and Clean, even this program itself before it went out of control!) and the only things that show up are tracking cookies and false positives.
A virus causing my problem is virtually impossible. All was well, until this thing ruined my system drive.
http://www.filterbit.com is a free online virus scanner, and a demo for the Metascan multiple antivirus SDK available here: http://www.opswat.com/products/metascan
It includes licenses for up to 8 pre-installed engines (scanning simlutaneously) or just as a core service/api used to integrate your own separately licensed AV.
Hope this is good info.
This is big! I stumbled again into the same auto-deletion on my new Windows 7 64-bit system.
Once again I’m thankful that I have a drive image.
Anyways, this time, it had nothing to do with this program. In fact, the only recent software I installed (and uninstalled) is BBFlashback Express. Even though I uninstalled it, the display capture driver was still existent on device manager, but I’ve left it alone. A few days afterwards, my system got nuked (as I said in my first sentence).
Now that I think about it, the BBFlashback driver was also existent on my XP machine at the time it got nuked.
Coincidence? I think not.
After testing out Multi AV Scanning Tool on my XP mode, I retract what I said almost a year ago. It is perfectly sound (although I don’t really need it).
Please remove all my comments on this thread. I’ve been too rash and emotional while posting them.
I will investigate further onto the true cause of the mysterious system wiping that have occurred.
Thank you Jeremy!
Thank you very much Raymond.!!!
Love this tool. Harnesses several scanners’ power without the pains of dealing with individual GUIs. It would be painful to be so thorough without this tool.
It would be nice if this tool could receive some updates to include new scanning engines that may have become available by now.
If not, perhaps release the source?
Yushatak:
I am working on v7.00 which is currently in Beta. It has two new scanners and I have removed the McAfee module.