A topic to help wandering admins who often, or not very often, help friends or sponsored organizations get rid of viruses.
Initially, antivirus viruses were added to the topic, but received no response, but I would like to hear how this system can be upgraded. Therefore, try this blog ... Do not be angry
So, it is necessary:
1) several popular antiviruses were downloaded daily at night (in my example, CureIt, bases for AviraFree, bases for AVZ).
2) so that when you insert a specific flash drive into the computer, they are automatically poured onto it.
')
For implementation will require:
1) a wonderful scheduler for windows
nncron (for XP version 1.91, for subsequent wine systems -
1.93 )
2) a wonderful backup program of the same author
nnbackup3) the file download utility is controlled by the
Curl command line parameters (in general, nncron has built-in file upload functions, and I don’t remember for what reason I started using curl instead of them - it is possible that I didn’t understand the cron manual and immediately began to look for an external alternative)
1. Download, install the program nncron and nnbackup, unpack the curl in the right place.
2. In nncron, we create a simple little task that will download cureit and fresh anti-virus databases into the specified folder (the script will run every day at 5.45):
#( antivirus_download
Time: 45 5 * * * *
Action:
ShowMinimized NormalPriority
START-APPW: c:\tc\Utils\curl-7.19.5\curl.exe -od:\Downloads\Temp\Antivirus\cureit.exe ftp.drweb.com/pub/drweb/cureit/cureit.exe
START-APPW: c:\tc\Utils\curl-7.19.5\curl.exe -od:\Downloads\Temp\Antivirus\ivdf_fusebundle_nt_en.zip dl.antivir.de/down/vdf/ivdf_fusebundle_nt_en.zip
START-APPW: c:\tc\Utils\curl-7.19.5\curl.exe -od:\Downloads\Temp\Antivirus\avzbase.zip z-oleg.com/secur/avz_up/avzbase.zip
)#
START-APPW - the command means that the following actions in the course of the script will begin only after the curl is completed.
The first parameter after the colon - the path to the curl utility - substitute your own where you unpacked it
after the -o parameter specify the folder where the file will be downloaded and the name of the file itself
after a space indicate where this file should come from.
3. Create a task in nncron that will track the insertion and identification of flash drives:
#( flash_iserted
WatchDrive: "*"
\
Action:
FILE-EXIST: "%DRIVE-LETTER%:\Antivirus\"
\ Antivirus
IF
StartIn: "c:\tc\Utils_automanize\nnBackup\"
ShowMinimized NormalPriority
QSTART-APP: c:\tc\Utils_automanize\nnBackup\nnbackup.exe sync -id:\Downloads\Temp\Antivirus\ -o %DRIVE-LETTER%:\Antivirus\ -log
\
THEN
)#
So you need to replace
c: \ tc \ Utils_automanize \ nnBackup \ - on your way to the folder where nnbackup is located,
d: \ Downloads \ Temp \ Antivirus \ - on your way where antiviruses are downloaded.
The parameter QSTART-APP - before performing synchronization will pop up a dialog box - do synchronization or not. This parameter can be replaced by START-APP - then synchronization will be performed automatically without additional questions.
Of course, in the folder that you download the updates, you must once put the distributions of the necessary antiviruses (in this case, avira and avz). Also, I always have the hijackthis utility there.
For Windows users older than XP (including 2003 using a terminal server, vista, 7) - I assume that instead of nncron you can program the scheduler built into the operating system using only the curl and nnbackup utilities.
If readers have a desire to add a set of utilities, having advised something new, I am looking forward to your comments.