Hello,
I’ve been using Avast for a while now and works great except for a couple of minor things.
I am unable to schedule a boot scan without fist switching to an admin user.
While doing a GUI virus scan, sometimes a file cannot be deleted or moved to the vault. I am not talking about files that are executing.
I am now using SuRun in my limited user mode. This program allows individual exe’s to have their user rights elevated. This is what I would like to try to do for the exe’s that perform the boot time schedule and the file deleting during scans.
Can someone please tell me which files do these functions in Avast?
Scheduling a boot-time scan means writing something into HKEY_LOCAL_MACHINE hive - so yes, it’s something a limited user cannot do.
If it’s a file that the currently logged-on user doesn’t have rights for, it’s quite understandable.
Depends on what GUI scanner you use; might be ashSimpl.exe for the skinned Simple UI, ashSimp2.exe for the skinless Simple UI, ashEnhcd.exe for Enhanced UI, ashAvast.exe for the splash screen (memory) scan, ashQuick.exe for the Explorer Extension, etc. All the operations are done in-process, i.e. there’s certainly no special “executable for deleting files”.
For the boot-time scanner scheduling, you may use the command-line tool sched.exe (in avast! installation folder).
I have just installed SuRun, so I am getting the experience now.
SuRun will happily raise user rights of applications executed from the explorer context menu. However, unfortunately, it has great difficulty launching an application with increased user rights if launched by some program. It works for a few programs but mostly it doesn’t.
SuRun appears to be a very clever program, but falls just short of being really usable.
I have been using a modified version of Launch Admin http://launch-admin.sourceforge.net/ for some time. With this I have been able to schedule boot scans but have not been able to do normal scans in my limited user account.
Looks like I am going back to Launch Admin.