Author Topic: Does a scan of Drive C also scan registry?  (Read 8623 times)

0 Members and 1 Guest are viewing this topic.

tbessie

  • Guest
Does a scan of Drive C also scan registry?
« on: October 04, 2008, 11:05:48 AM »
I was wondering, when I do a drive scan of Drive C, is the registry also scanned for the EFFECTS of virus activity (as opposed to virus creation signatures in infecting files)?

Also, are the effects of a virus running scanned for, instead of just the signatures of software that will create the virus in the first place?

Or do I have to run separate scans of some sort to scan for these, in which case, which ones?

- Tim

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Does a scan of Drive C also scan registry?
« Reply #1 on: October 04, 2008, 03:36:42 PM »
The registry hives are scanned as files (strings) and not as a 'set of registry keys'.
The registry activity is scanned by the avast resident.

The resident scanning, by default, will not scan archive files. The on-demand scanning will do it if you set so. I recommend a monthly scanning of avast with archive files turned on (at least on critical areas of the computer).
The best things in life are free.

tbessie

  • Guest
Re: Does a scan of Drive C also scan registry?
« Reply #2 on: October 04, 2008, 09:46:31 PM »
The registry hives are scanned as files (strings) and not as a 'set of registry keys'.
The registry activity is scanned by the avast resident.

The resident scanning, by default, will not scan archive files. The on-demand scanning will do it if you set so. I recommend a monthly scanning of avast with archive files turned on (at least on critical areas of the computer).

I guess what I mean is, say I turn On-Access Protection off.

Then I run a program which contains a virus or trojan, and it's not detected because On-Access Protection is off.

The program modifies the registry, creates various files, etc.

Then I run a scan on the C drive.

Will Avast! catch those registry mods, etc. and see that the machine is now infected, even though it didn't catch it when the infection occurred?  i.e. it will catch the effects of the infection, not just the infection happening?

If it won't, is there any way to scan for these infection *results*?

- Tim

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Does a scan of Drive C also scan registry?
« Reply #3 on: October 04, 2008, 09:52:56 PM »
Will Avast! catch those registry mods, etc.
No. Only the infected files.

i.e. it will catch the effects of the infection, not just the infection happening?
Not all the times, mostly not.

If it won't, is there any way to scan for these infection *results*?
Yes, SuperAntispyware, SpywareTerminator, MBAM.

But, really, you'll pay a very high price on disabling the antivirus protection. You'll learn that it won't worth...
The best things in life are free.

tbessie

  • Guest
Re: Does a scan of Drive C also scan registry?
« Reply #4 on: October 04, 2008, 10:07:22 PM »
Will Avast! catch those registry mods, etc.
No. Only the infected files.

i.e. it will catch the effects of the infection, not just the infection happening?
Not all the times, mostly not.

If it won't, is there any way to scan for these infection *results*?
Yes, SuperAntispyware, SpywareTerminator, MBAM.

But, really, you'll pay a very high price on disabling the antivirus protection. You'll learn that it won't worth...

Thanks much for your suggestions!  Hopefully, nothing has yet been infected! :-)

- Tim

wyrmrider

  • Guest
Re: Does a scan of Drive C also scan registry?
« Reply #5 on: October 05, 2008, 02:59:34 AM »
you can also run an antispyware in prevent mode
here's some free ones
Spyware terminator - without the Clam av and BHO toolbar
Windows Defender
Spybot T-timer
BO clean
Spyware doctor free from google pack
alongside Avast
Paid
SAS
MBAM
Counterspy
Spysweeper

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Does a scan of Drive C also scan registry?
« Reply #6 on: October 05, 2008, 11:37:18 PM »
Thanks much for your suggestions!  Hopefully, nothing has yet been infected! :-)
I hope so...
Welcome to avast forums.
Feel free to come back any time you need help or just to change experiences 8)
The best things in life are free.