Automatic scan of USB memory

Norton Security | Norton Internet Security
1

Please can anybody tell me how to activate USB memory autoscan?

I use Norton Antivirus 2012.  I have "Realtime protection - Removable scan" turned on.  But AV does not scan a memory stick.

I also confirmed that the drive G: (USB memory drive) is not listed in the exception.

 

I have intentionally stored a exe file in the memory.  This exe file is V6SP1.exe out of Microsoft MASM32 file set.  Norton

AV erroneously detect it as a virus (false positive).   This false positive is not the problem. 

 

The problem is:

Norton AV does not  scan the memory.  I can say that because it did not detect V6SP1.EXE.

I manually scanned the memory by right clicking the memory on explorer and clicked Norton scan.  By this, it detected V6SP1.EXE.

 

So, I conclude that AV did not scan automatically when the stick was inserted.

Any help is appreciated.

Tak

 

2

I suppose you are asking for an automated complete scan when the USB stick is inserted. Kaspersky has that feature, to be honest I was tired of that question each time I mounted a stick. If you are working with clients' sticks, the automatic scan might be useful.

 

Norton does not have the same feature, but you can start a “half-automatic” scan. Depending of your Windows settings for Autorun, a windows pops up when you insert the stick. Click the alternative that starts Explorer, right-click the actual device in the left part of the Explorer window, select 'Norton > Scan now'.

 

Maybe this thread is useful to you:

http://community.norton.com/t5/Norton-Internet-Security-Norton/NIS-2012-Not-Scanning-USB-Flash-Drive/td-p/594444

 

3

Thanks John,

OK, I will seek other means.

Tak

4

Information only:

 

I found an utility named USBVirusScan.  This is useful for me as a frequent client USB user.

    http://blog.didierstevens.com/programs/usbvirusscan/

I edited the start.bat as follows:

   start /min c:\windows\USBVirusScan.exe "C:\Program Files (x86)\Norton Antivirus\Engine\20.3.0.36\navw32.exe" %%c: /S+ /B+
I also prepared an ending bat file USBScanStop.bat, which is run after client use:
   c:\windows\usbvirusscan -q

 

Tak

 

 

5

Thanks, Tak! USBVirusScan seems to be a great utility when needed. I have kept your info, thanks for sharing.

 

6

Further information:

 

One problem is that the folder of NAVW32.exe changes when updated. 

I wrote another .BAT file that detect the installed folder to avoid frequent modification of the .BAT file.

 

-------- snip -----------

setlocal
reg query "HKLM\software\microsoft\windows\currentversion\app paths\navw32.exe"  | find ":\" >--TMP--.txt
for /f "tokens=3,4,5,6" %%p in (--TMP--.txt) do set nortonpath=%%p %%q %%r %%s
del --TMP--.txt
start /b USBVirusScan.exe %nortonpath% %%c: /S+ /B+
endlocal

-------- snip -----------

 

Tak