Scanning a drive as slave

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
Is there any way of doing a complete scan on a drive from another computer
which you have slaved onto another machine. I realize you can scan the
drive, but will it also scan the registry of that drive?

--
    --- Where did my libigo? ---

Re: Scanning a drive as slave


| Is there any way of doing a complete scan on a drive from another computer
| which you have slaved onto another machine. I realize you can scan the
| drive, but will it also scan the registry of that drive?


No.  In fact it will scan the Registry of the surrogate PC.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Scanning a drive as slave


Quoted text here. Click to load it

Yep. True. And I hate that about Malwarebytes Anti-malware.

Beautiful and effective program though. I often use my laptop and an adapter
to scan a drive while on my job as an IT consultant - I sure wish
Malwarebytes could could scan a USB adapted hard drive registry. That would
be a very nice improvement.

-Frank


Re: Scanning a drive as slave


Quoted text here. Click to load it

Have you made a post to that effect on their forum, Frank?

If not, go here http://www.malwarebytes.org/forums/index.php ?

--
Dave



Re: Scanning a drive as slave



| Yep. True. And I hate that about Malwarebytes Anti-malware.

| Beautiful and effective program though. I often use my laptop and an adapter
| to scan a drive while on my job as an IT consultant - I sure wish
| Malwarebytes could could scan a USB adapted hard drive registry. That would
| be a very nice improvement.

| -Frank

Actually, no.

The algorithm used in MBAM is not one merely based on signature detection.  I
can't go
into specifics on it but it is why is more successful in dealing with non-viral
malware
than anti virus applications.  Simply stated, MBAM is not suited for that
approach.  It
needs to be executed through the affected system.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Scanning a drive as slave


Quoted text here. Click to load it

Well then, I wish that could be changed.

Sometimes, when a drive is not bootable, or usable, due to infections, it is
appropriate to scan the drive externally, then re-try. I have had to do this
often. It usually works. After MBAM finds and removes the found issues, I
then boot the original PC with that drive and re-scan - it almost always
finds yet more. Okay so far. But... sometimes, not often, even after
scanning externally and removing what MBAM finds, it still won't boot, or
isn't usable (hangs, etc) - because of registry issues.

-Frank


Re: Scanning a drive as slave




| Well then, I wish that could be changed.

| Sometimes, when a drive is not bootable, or usable, due to infections, it is
| appropriate to scan the drive externally, then re-try. I have had to do this
| often. It usually works. After MBAM finds and removes the found issues, I
| then boot the original PC with that drive and re-scan - it almost always
| finds yet more. Okay so far. But... sometimes, not often, even after
| scanning externally and removing what MBAM finds, it still won't boot, or
| isn't usable (hangs, etc) - because of registry issues.

| -Frank


I understand.  I also have been told HOW MBAM does what it does and it would not
have the
efficacy it has if it was alone a file scanner.

You just have to adapt to the way it works by scanning with anti virus
applications by
using a surrogate PC and removing files and then place the drive back in the
affected PC
and using MBAM.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: Scanning a drive as slave


Quoted text here. Click to load it

MBAM's unique effectiveness would be crippled to change over in the
manner you seem to want.

Quoted text here. Click to load it

We do have perfectly sound prescan options, which under almost all
conditions does allow MBAM to run on the affected machine and clean the
system up.

Quoted text here. Click to load it

Which is why you really shouldn't have mbam scan in this manner, As it
has no way of making corrections to the registry based on the detected
malware.


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org
  


Re: Scanning a drive as slave


Quoted text here. Click to load it

MalwareBytes isn't designed to clean a system that it's not installed on.  
It can of course scan for files as you request, but it only deals with
the registry in use by the host OS.
 
Quoted text here. Click to load it

Sorry, it's something we might offer in the future, but not at this time.


--
Regards,
Dustin Cook
Malware Researcher
MalwareBytes - http://www.malwarebytes.org
  


Site Timeline