Most of the time one Anti-Virus software can’t completely protect your computer from virus. However, having 2 or more anti-virus program in your computer will make your computer unstable. My customer uses HP computers and by default it comes with 60 days trial Norton Antivirus. When it expires, nearly every of my customers would immediately download and install the FREE version of AVG WITHOUT uninstalling the expired Norton Antivirus first. Few unlucky ones wasn’t able to boot in Windows after installing AVG. There is one case that can boot in to Windows but AVG can’t function properly.
When you’re infected by persistent virus like Brontok, you’d be frustrated if the installed Anti-Virus program on your computer is unable to clean it. So how to scan computer using more than 1 type of antivirus? Is the only solution to uninstall the current antivirus program and then install another one? Fortunately not, here’s how you can scan your computer with 4 types of Anti Virus program without installing them.
Multi AV Scanning Tool by David H. Lipman is a malware removal utility incorporating multiple command line scanners including McAfee, Sophos, Kaspersky and Trend engines.
To perform a scan using these vendor’s scanners choose the number on the menu corresponding to the Anti Virus scanner you wish to run. The scripts will automatically obtain the Anti Virus vendor’s files for you. You don’t need to have them already resident on your computer. After the files have been downloaded to your computer and have been made ready to use, you will get a prompt if you want to run the scanner or not. If you do want to perform a scan then click on “Yes“, if you do not want to perform a scan (maybe you want to perform the scan in SAFE MODE) choose “No“. If you choose No or ignore the prompt it will return you back to the main menu. An example prompt for the Sophos scanner is shown below.
If you choose to perform a scan then you will be prompted to see if you want to perform the scan of a particular folder or location. An example prompt for the Sophos scanner is shown below.
If you choose “No” then the AV scanner will proceed to perform a scan of all hard disks on the computer. If you choose “Yes” then you will be prompted to type in the path of the folder or the drive to be scanned. The scanner will then proceed to perform the scan of that location and all folders below it. If the drive or folder does not exist (for example a syntax error is made in typing the folder location) you will again be prompted to type in the path of the folder or the drive to be scanned.
Sophos, McAfee and Kaspersky uses the same method above to ask you which location you’d like to scan but for Trend, it will automatically obtain the Trend Micro Sysclean utility and the latest Trend Pattern File. After the files have been downloaded to your computer and they have been made ready to use, you will see the following GUI utility.
By clicking on the “Advanced” button you can choose to scan a specified folder or drive. If it is not chosen then Sysclean will scan all hard disks.
Here is how to run Multi AV Scanning tool in your computer.
1. Download Multi_AV.exe from the link at the end of this article.
2. Run Multi_AV.exe (You must use the default folder C:\AV-CLS)
3. Run StartMenu.BAT or double-click on ‘Start Menu‘ shortcut from C:\AV-CLS folder.
There are two modes of operation: Remove/Delete and Detect Only. The software defaults to the Remove/Delete mode which means that any files that are deemed to be infected will be automatically removed from the system and can which can not be cleaned. If you desire to use the Multi AV Scanning Tool just to detect and not delete malware, you can hit the letter “D” and place the software in a Detect Only mode of operation. Those files found to be infected by malware will be logged but not cleaned nor deleted from the system. These two modes of operation are only for the McAfee, Sophos and Kaspersky modules since the Trend Micro Sysclean utility has a GUI selection for detection with or without file deletion.
Included in the C:\AV-CLS folder is a file called killproc.txt and is used to shutdown or kill running processes prior to scanning the platform. There are two processes already in the text file. iexplore.exe (Internet Explorer) and firefox.exe (FireFox).
You can add more file names in the text file making sure the last line is a blank line. You can also bring up the killproc.txt text file by hitting the “E” key in Multi-AV menu.
Multi AV Scanning Tool website no longer accessible but it’s still a very good free multiple antivirus program that can be used to scan and remove viruses.
Note: The directory C:\AV-CLS is hard coded and should not be changed. Multi AV should be used to remove an infection from your computer. They are not a replacement for realtime antivirus protection but they are an effective tool to remove malware (viruses etc.) from an infected machine where antivirus software is disabled, out-of-date or even if it is not installed at all.
[ Download MultiAV ]
hi, raymond sir iam requesting you that my avg anti virus is out dated plz scane my computer
Now at v8.00 and Ray’s data here is WAY BEHIND in versions.
Now capable of using a Proxy Server
multi-av.thespykiller.co.uk/
very good
I wish Ray would update this.
The version he shows is way out of date!
its realy coool
scan my computer with multiple antivirus
Multi-AV Scanning Tool v7.03 has been released!
Highlights…
* Removed the McAfee module.
* Fixed the Trend Micro module for a change in the signature version URL.
* Added the Emsisoft Anti Malware scanner module.
* Added the Avira scanner module.
Yushatak:
I am working on v7.00 which is currently in Beta. It has two new scanners and I have removed the McAfee module.
Love this tool. Harnesses several scanners’ power without the pains of dealing with individual GUIs. It would be painful to be so thorough without this tool.
It would be nice if this tool could receive some updates to include new scanning engines that may have become available by now.
If not, perhaps release the source?
Thank you very much Raymond.!!!
Thank you Jeremy!
Please remove all my comments on this thread. I’ve been too rash and emotional while posting them.
I will investigate further onto the true cause of the mysterious system wiping that have occurred.
This is big! I stumbled again into the same auto-deletion on my new Windows 7 64-bit system.
Once again I’m thankful that I have a drive image.
Anyways, this time, it had nothing to do with this program. In fact, the only recent software I installed (and uninstalled) is BBFlashback Express. Even though I uninstalled it, the display capture driver was still existent on device manager, but I’ve left it alone. A few days afterwards, my system got nuked (as I said in my first sentence).
Now that I think about it, the BBFlashback driver was also existent on my XP machine at the time it got nuked.
Coincidence? I think not.
After testing out Multi AV Scanning Tool on my XP mode, I retract what I said almost a year ago. It is perfectly sound (although I don’t really need it).
filterbit.com is a free online virus scanner, and a demo for the Metascan multiple antivirus SDK available here: opswat.com/products/metascan
It includes licenses for up to 8 pre-installed engines (scanning simlutaneously) or just as a core service/api used to integrate your own separately licensed AV.
Hope this is good info.
Another note, my computer is very clean. Not only is it pretty new, I’ve installed all sorts of protection since day one!
Examples: Sandbox, Limited Rights, Passive Cookies/Website/ActiveX Blockers, HIPS, Firewall, On-demands, Backup, Firefox Add-ons, Software Restriction Policy, etc.
Everything is on different layers, and are regularly updated. I’ve scanned with all sorts of programs (ex: A-squared, Avira, Avast, Hitman Pro, Malwarebytes’, SUPERAntispyware, Spybot, Ad-Aware, Spyware Doctor, Norton Security Scan and Clean, even this program itself before it went out of control!) and the only things that show up are tracking cookies and false positives.
A virus causing my problem is virtually impossible. All was well, until this thing ruined my system drive.
I’m not sure what happened exactly, but Multi-AV Scanning Tool deleted every file on my system drive! (excluding those in memory). It worked fine before.
The deletion just happened silently after I chose the Trend Micro. I don’t think there was even a process.
The first time it happened, I wasn’t even sure WHAT happened until it’s too late. Good thing I had a drive image. The second time I was prepared, and confirmed the culprit.
Luckily my data drive was never touched.
Will never touch it again *watches shredding progress*.
I would love to provide a log file, except it deletes itself first (and everything within its folder). Heck, when I chose Trend Micro, it didn’t even start scanning! It disappears and reappears when the wiping is done.
I completely agree with everyone’s statement on the danger of this software.
Hi
Would this tool only use those AV’s signature files database or does it use their hueristics as well ?
I’ve been an avid fan and user of Multi-AV for several years and have never encountered a single issue with the software erasing files from a hard drive. However there is one item persons claiming they’ve been the victim of this issue may not have considered. If a virus infects a file, the file may become deleted in the process of being “cleaned”. Hence if your system has become infected with a virus, designed to infect many files throughout your hard drive, then guess what may happen when you run an AV scanner? The result is that many files could become deleted. Of course if this issue were to occur, the log file created by the AV software should validate this action. In closing, and directed towards those who are claiming Multi-AV deleted the contents of their hard drive, you wouldn’t by chance still have the log file associated with the use of Multi-AV do you?
Hi,
My system is fully infected by newfolder and autopaly virus, i am uanble to buy paid antivirus softwares, is there any online scan sites, please give the details
Praveen
Once again, my previous posts are not any type of fabrication. All the things that I indicated happening, Happened! I don’t know know if it is some type of virus that is working in conjunction (and I am not implying “purposefully” I mean the virus maker set it up to do that when Sophos was initiated) or my system was completely infected (which I doubt) or it is just some anomaly with certain set-ups. Apparently it has happened to more than just me. I cannot vouch for the other posters but as this did in fact happen to me, I don’t think they are all just bashing the software. I am glad for everyone that has had success with Sophos and it does seem that it’s creator is a knowledgeable and respected technician. I had the disaster that I had and wanted some feed-back, answers and possibly some help, not just advertisements about how great Sophos is or utter denial that what happened to my computer had actually taken place.
Thank You
Hi All,
I have used this program as well since 2006, and I have to say that at no point has executing this program wiped out my PC. Furthermore, I have known David Lipman through usenet since 2004, and he is one of the best in alt.comp.virus.
With that said, this tool is great.
Regarding the claim that a hard-drive was systematically erased by this program, there are two possibilities:
1) It is either as David Lipman stated, that this is a complete fabrication, or
2) That a hard drive is wiped out by the bug that this program and its modules are intended to kill.
If the latter, than it would be nice to know exactly what bug is doing this, and if this is purely coincidental or if somehow David’s tool (or the AV tools bundled with it) are specifically being targetted by a virus/worm/other malware.
Thanks.
I have used this Mulit-AV since 2006 on several systems. It has always performed nicely and have never had a problem with any of the 4 scanners. It is a good tool to have to fight the bugs.
Thank you David H. Lipman for your hard work!
I haven\\\\\\\’t tried this yet…….. but just based on those negative feedback sounds like a case of false positives….. but i\\\\\\\’d really like to give this a try…. david is really doing a good job for simplyfying the troubleshooting ill be more than happy to give a feedback after checking the files look for some holes.
Does anyone not see that there is a “trend” with this software of wiping peoples C drives. Today I am noticing that many programs aren’t working on top of the ones it completely deleted because pieces of them are gone. This is BAD. This piece of crap wiped over 2000 music files, several hundred text files and thousands of graphics files. Someone in the know needs to reply to these posts.
Ran the Sophos module and it deleted ALL my music files ALL of my settings ALL user pics, many icons and God only knows what else. It also deleted itself so I couldn’t open it to see if there was some kind of recovery. This is horrible. I am very unhappy. Any one know of a fix? System Restore only added the icons back MANY folders are empty now. WTF? For clarification purposes I am not someone just slamming your software. This has really happened, now what do I do?
I’m extremely upset. I ran the first Sophos scanner and it deleted many of my shortcuts and completely erased all my settings for Firefox and Internet Explorer and I don’t know what to do now. All of my bookmarks, themes, and information is gone, including many of my other settings. It also wipes out almost all of the files in my /application data folder. Can anyone help me recover these settings possibly?
I don’t know about the comment about the person who claims that he is the authoer of this program but this crappy program erased my C drive too, only the windows folder was left all other files just disappeared after I updated trend micro.
I was hoping that I have got a real useful tool but there is something really wrong with this one.
nice this sofwere
To Craig:
11/4/08 Blog reply.
This was a False Positive with SecureWeb-Gateway.
When I submitted this False Positive to my contact at the company I was getting…
SecureWeb-Gateway 6.7.6 2008.11.09 Win32.Vulnerable.gen!High (suspicious)
In any case, the False Positive has been rectified.
Well, this may be a case of a false postive, seeing that it is only one result out of many at VirusTotal but I got the following report there:
SecureWeb-Gateway 6.7.6 2008.11.03 Trojan.Keylogger.Win32.Malware.gen!12 (suspicious)
Can this be checked just in case?
I am the author of the Multi AV Scanning Tool.
I read the post…
“DO NOT USE THIS PLEASE!!!
It will blow away all files on your C: drive, even if you run it in Detect mode.
BE WARNED!”
This is a complete fabrication. It will NOT “…blow away all files on your C: drive…”. It has been downloaded and 10′s of thousands of times and has been tested by numerous persons in the anti malware community. The Multi-AV is a front-end to the anti virus scanners provided the listed anti virus vendors. The utility itself will ONLY delete the etc/hosts file after making a backup.
I also saw…
“Hi,
I tried this today and unfortunately as soon as I started Sophos… all my data files were deleted. Directories were left intact but files in them were all gone. Don’t know what happened.
Please use this with care.”
Again, the same reply. The Sophos module of my Multi-AV will not delete all your data files.
I want to point out that I have done this utility in the KiXtart, interpreted, scripting language and anyone can see what is coded. This is for transparency so YOU can see exactly what it does.
I am a frequenter on Usenet and I am a meber of an International malware research group and I invite comments.
I will also state that I have a nemesis who goes by the ‘nym PCBUTTS1. He is a software plagiarizer that I, and others, have caught many times plagiarizing the hard work and utilities of real anti malware personalities. I fear that the derogatory posts indicating that all files are deleted may be him posting here for the purpose of discrediting my Multi-AV. I invite all of you to use Google to see who/what PCBUTTS1 is all about.
scan my computer now
I was able to use the sophos and trend without problems. but I can not make work the other 2. They ask me a floppy drive file…any help?
tx
Thanks
DO NOT USE THIS PLEASE!!!
It will blow away all files on your C: drive, even if you run it in Detect mode.
BE WARNED!
After getting some reports that Sophos accidentally deleted many files, I tried it myself a folder with 331 different files. It contains PHP, TXT, EXE, PNG.
1 master boot record swept.
331 files swept in 6 seconds.
No viruses were discovered.
Ending Sophos Anti-Virus.
I check back the folder and all 331 files still intact.
Another test. I place some viruses and trojans into the folder and ran a scan again. It deleted the virus/trojans and left the other files untouched.
^^woah are you serious ? did anyone else get this problem ?
“Hi,
I tried this today and unfortunately as soon as I started Sophos… all my data files were deleted. Directories were left intact but files in them were all gone. Don’t know what happened.
Please use this with care.”
I have to warn you people.You must tremendously be careful when you use this software.All my files deleted by this all in one- unfortunetaly for this word- crap…So I re installed everything.Windows,softs, son on…Well I hope my comments may help other people who never attempt to use this all in one thing…Keep working Raymond.
Dear raymond,
This software sounds very good…have you any good advice for mac systems?
thanks in advance,
dc
no more clunky anti virus crap for me or waiting for virus total or there stupid size limit.
Hi,
I tried this today and unfortunately as soon as I started Sophos… all my data files were deleted. Directories were left intact but files in them were all gone. Don’t know what happened.
Please use this with care.
Hi,
I want to known one thing, now I used Kaspersky Anti virus 6 and can i use free anti virus 2008?
i think tht solution lies in removing the viruses from computer than scanning them………bt then also its gud software…..i appreciate ur efforts……….
Wow! Thanks for this Raymond!
John, you if do a search, you’ll find that I already posted VirScan and VirusTotal. Another one is called Jotti.
Sounds like great software!
It might also be worth mentioning that if you have a specific program you are concerned may be a virus/trojan/malware, another solution is to upload the program to any of these sites:
virus.org
virscan.org
virustotal.com
They will check your file with 20+ antivirus type programs (including the well-known ones like Norton, AVG, etc). Very complete scanning! :-)