EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Trend Micro Virus Buster doesn't work on the virtual disk

Also by EldoS Corporation: MsgConnect
Cross-platform protocol-independent communication framework for building peer-to-peer and client-server applications and middleware components.
#19875
Created: 04/20/2012 03:05:25
by Masashi Harasawa (Priority support level)
Registration date: 11/07/2011
Total messages: 15

I'm using Japanese Trend Micro Virus Buster Corporate Edition 10.6 (http://downloadcenter.trendmicro.com/index.php?regs=jp&clk=latest&clkval=4140&lang_loc=13).
But Real-time scan of the Virus Buster doesn't exclude virus files on the virtual disk.

My systems and the changes in Mapper Sample are the following.

OS: Windows Server 2008 R2 (64bit, Japanese edition)
CBFS: 3.2.106

Uncommented:
mCbFs.OnGetFileSecurity = new CbFsGetFileSecurityEvent(CbFsGetFileSecurity);
mCbFs.OnSetFileSecurity = new CbFsSetFileSecurityEvent(CbFsSetFileSecurity);

Modified:
mCbFs.StorageType = CbFsStorageType.stDisk;
mCbFs.StorageCharacteristics = 0;
mCbFs.AddMountingPoint(edtMountinPoint.Text, 65536, null);

Added:
mCbFs.SectorSize = 4096;

Mount: D:\
Mounting Point: Z:

Virus Buster's settings:
Except for D:\, in other words except for the real storage path.

I did "Mount" in the above environment.
Next, I copied the dummy virus file to virtual disk(Z:\), but Real-time scan of the Virus Buster didn't work.
In the above settings, don't Real-time scan of the Virus Buster exclude virus files on the virtual disk ?

Thanks a lot for your help.
Masashi Harasawa
#19876
Created: 04/20/2012 03:21:01
by Eugene Mayevski (EldoS Corp.)

I am not sure that I understand the question right. You have told the antivirus to exclude files on disk D: and created virtual disk Z:. The antivirus *will* process virtual disk Z: as you have not excluded it. So what the problem is?


Sincerely yours,
Eugene Mayevski
#19879
Created: 04/20/2012 03:48:51
by Masashi Harasawa (Priority support level)
Registration date: 11/07/2011
Total messages: 15

I want to make the antivirus exclude virus files via the virtual disk, so I set to except for D:\.
Other antivirus softwares, for exmaple, Symantec Endpoint Protection, McAfee VirusScan Enterprise work well via the virtual disk.

Thanks.
Masashi Harasawa
#19880
Created: 04/20/2012 05:00:50
by Eugene Mayevski (EldoS Corp.)

I don't understand what "via virtual disk" means. If you want to exclude files ON drive Z: then exclude drive Z: from scanning in TrendMicro.

Also, if I misunderstand you and your idea works for other software, then you need to contact TrendMicro for assistance and ask them why their software doesn't work like you expect.


Sincerely yours,
Eugene Mayevski
#19904
Created: 04/23/2012 03:14:10
by Masashi Harasawa (Priority support level)
Registration date: 11/07/2011
Total messages: 15

I want to make the Virus Buster to scan virtual disk Z: and detect virus files.
"via virtual disk" is such meanings.

In the case of the above mentioned Mapper Sample setup, the Virus Buster's scan doesn't work.
But, in the case of the following Mapper Sample setup, I confirmed that the Virus Buster's scan works and detects virus files.

Uncommented:
mCbFs.OnGetFileSecurity = new CbFsGetFileSecurityEvent(CbFsGetFileSecurity);
mCbFs.OnSetFileSecurity = new CbFsSetFileSecurityEvent(CbFsSetFileSecurity);

Modified:
mCbFs.StorageType = CbFsStorageType.stDiskPnP;
mCbFs.StorageCharacteristics = 0;
mCbFs.AddMountingPoint(edtMountinPoint.Text, 131072, null);

Added:
mCbFs.SectorSize = 512;

In the case of the first Mapper Sample setup, does CBFS support the Virus Buster's scanning virtual disk Z: ?

Thanks a lot for your help.
Masashi Harasawa
#19905
Created: 04/23/2012 03:57:59
by Eugene Mayevski (EldoS Corp.)

CBFS doesn't "support" or "not support" third-party software. CBFS provides a virtual file system which can be handled properly or improperly by third-party software.

We have no way to control or even to know how that third-party software works and why it doesn't function properly in case of CBFS. We can conduct such investigation as a custom paid service, but your better option is to contact the vendor of the software and ask them.


Sincerely yours,
Eugene Mayevski
#19906
Created: 04/23/2012 03:59:49
by Eugene Mayevski (EldoS Corp.)

After further looking at your changes I guess that your antivirus scans only local disk devices and doesn't scan anything which is not a disk device. And this is why setting stDiskPnP changes its behavior. Either the antivirus has a setting which tells it what types of disks to scan or this is a limitation of that antivirus. So please contact its vendor for further assistance.


Sincerely yours,
Eugene Mayevski
#19907
Created: 04/23/2012 04:56:04
by Masashi Harasawa (Priority support level)
Registration date: 11/07/2011
Total messages: 15

I received your report. Thank you.
I will follow your instruction.

Thanks.
Masashi Harasawa
Also by EldoS Corporation: CallbackDisk
Create virtual disks backed by memory or custom location, expose disk images as disks and more.

Reply

Statistics

Topic viewed 1329 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top