Morning all,
I'm testing the use of Sav32CLI from a PE boot image created from the Windows 7 Automated Installation kit so that it can be run from a known clean boot source, for when there are things that the installed copy of Sophos can't pick up/clean.
This has worked fine with XP machines, but today have had a Vista PC brought in. Sav32cli appears to be delving into an loop caused by Vista/W7 having a junction (symlink) within the user profile that points to the parent directory for legacy reasons
(c:\Users\<user>\AppData\Local contains 'Application Data' that points back to ...\AppData\Local).
Is there any option that needs to be set to get Sav32CLI to not descend into junctions and skip them instead? Or could that lead to viruses getting missed? It's been running for an hour so far and has been giving me pages of the same pair of viruses in the same order contained within
c:\Users\<user>\AppData\Local\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\... (repeats for several lines until it gets truncated so I can't see where it has really found these files).
On the plus side it does look as though it is finally starting to unwind the recursion so it will eventually find the original files and hopefully deal with them, but it would speed things up if it didn't spend an hour for each user profile on the computer scanning the same files over and over!
Ta,
Steve.
This thread was automatically locked due to age.
