MCShield v3

6

MCShield v3

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12279
  • Gde živiš: Höganäs, SE

Ne. Koliko znam, ne postoji program koji radi tako nešto.



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
offline
  • Pridružio: 27 Sep 2012
  • Poruke: 492
  • Gde živiš: BGD

Eto prilike, da se proslavite u svetu (ako je to tehnički izvodljivo) Wink



offline
  • Research Engineer @MalwareBytes
  • Pridružio: 09 Avg 2011
  • Poruke: 15837
  • Gde živiš: Beograd

Zar se vec nismo proslavili Razz

offline
  • Pridružio: 06 Sep 2014
  • Poruke: 3

Hi MCShield Team,

Apologies if I have posted in the wrong place, as I'm only a English speaker and Google Translate seems to be on the blink.

I'm not to sure if this program is causing issues for MCShield or MCShield is working as intended or a bug.

backup-utility.com/onekey-recovery.html

It used the scan the Partition but now I seem to get a Error ?


MCShield ::Anti-Malware Tool:: mcshield.net/

>>> v 3.0.5.28 / DB: 2014.8.26.1 / Windows 7 <<<

3/09/2014 6:51:44 PM > Drive W: - scan started (AOMEI Recovery Partition ~27 GB, NTFS HDD )..
=> The drive is clean.



3/09/2014 6:51:44 PM => Drive W: (AOMEI Recovery Partition, ~27 GB, NTFS) was scanned.





And a Image of my partitions :



Regards.

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12279
  • Gde živiš: Höganäs, SE

Hello and welcome.

The first message (Drive.Get.Fail) means that a drive is visible, but when the program tries to get information about it (drive type, size, file system, etc.) an error occurs.

The second message (in the tray) means that a drive has been connected to the system, but it is reported to be read only (meaning: we can't rename or delete files on it).

Practically, the program gets basic info about the drive and checks if the drive is read only; if it is, then the scan is aborted.
Why? Because if we can't modify the drive (delete/rename items) there's not much point in scanning it.
In case you want to disregard the fact that the program can't disinfect the drive and want to check it, you can start the scan from the context menu in Explorer.

I suppose that the backup/recovery program is keeping that partition locked (in an unusual way) and causing those messages from MCShield.

To tell you if everything is working as it should I need to know exactly when those messages appear (does it happen when Windows or MCShield starts or it happens later on when you perform some operation with that recovery software).

Could you post your AllScans logfile here?
That should give me enough info to understand what is happening (if you can't post the log for some reason, please explain exactly when those messages appear and what is it that you are doing when it happens).

offline
  • Pridružio: 06 Sep 2014
  • Poruke: 3

Hello dr_Bora,

Thanks for the explanation.

Citat:
In case you want to disregard the fact that the program can't disinfect the drive and want to check it, you can start the scan from the context menu in Explorer.

I do not think this would be possible as it does not show up as a Drive in Explorer, it has not been assigned a letter

Citat:
I suppose that the backup/recovery program is keeping that partition locked (in an unusual way) and causing those messages from MCShield.

I believe this to be the case with my limited knowledge and think this is no fault of MCShield.

Citat:
To tell you if everything is working as it should I need to know exactly when those messages appear (does it happen when Windows or MCShield starts or it happens later on when you perform some operation with that recovery software).

The error message in screenshot 1 appears after opening the Backup Program. ( right click an run as Administrator).

The message in screenshot 2 appears after i have closed out of the Backup Program and tried to open the Program again.

Citat:
Could you post your AllScans logfile here?



+ AllScans log - click to open

Regards.

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12279
  • Gde živiš: Höganäs, SE

Citat:The error message in screenshot 1 appears after opening the Backup Program. ( right click an run as Administrator).

The message in screenshot 2 appears after i have closed out of the Backup Program and tried to open the Program again.


Well, this explains what happens there.

So, you have a partition without a drive letter - this is fine because the partition is used to store the backup so you don't really want other programs messing around with it.
Timeline of the events:

1. The backup program starts and mounts the partition as a W: drive.
2. Windows sends a "new drive notification" to MCShield Real Time Monitor (the one in the tray).
3. MCShield RTM launches the scanner instructing it to scan W:
4. During the time it takes for the scanner to initialize, the backup program manages to acquire exclusive access to the drive W: (locks and hides it) so it could work with it without other programs interfering.
5. A while later, scanner gets initialized and tries to access W: drive which is no longer available.
6. Drive access operation fails and you get notified about it.

So, nothing is really wrong and the error message in this case is nothing to be concerned about.
I'd say that both programs are working as they should. To avoid the error messages from MCShield you could temporarily disable protection when you wish to work with the backup program or, simply, ignore the messages. Just click away them, they are not causing any harm.

offline
  • Pridružio: 06 Sep 2014
  • Poruke: 3

Good to know the program is working as it should. Thanks again.

offline
  • Pridružio: 27 Nov 2014
  • Poruke: 4

Hi ; Could You update offline updater to newest version please ??? The one we can download is : 2014.11.5.1 and it shoul be : 2014.11.23.1 ???
Thank You !! Smile

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12279
  • Gde živiš: Höganäs, SE

Hello.
Unfortunately, due to a technical issue, we can't update it right now.
Next version of database updater will be available in about 10 days.

Ko je trenutno na forumu
 

Ukupno su 623 korisnika na forumu :: 52 registrovanih, 11 sakrivenih i 560 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 1567 - dana 15 Jul 2016 20:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 8u47, aramis s, Arhiv, babble, BlekMen, Bloody, borko_marjanovic, caesar, calija.milos15, chester_perry, Cili2, Cranium, darkangel, dexter300, Djole, dragonserbia, dule_pacov, Dzoni Stek, Hussar, jaeger, JankoS, koja92, krkalon, laki123rambo, mandicdamir245, mean_machine, Milan A. Nikolic, Miskohd, nebkv, nedeljkovici, neko iz mase2, nindza52, patton, pein, RADOVAN.S, ray ban11, rovac, samsung, scimitar19, shone34, SOVO515, StepskiVuk, stevo, suton2, theNedjeljko, trutcina, uruk, vladom6, Warhawk, Webb, Wrangler, yufighter