Author Topic: how can i scan for rookit drives?  (Read 6847 times)

0 Members and 1 Guest are viewing this topic.

mantra

  • Guest
how can i scan for rookit drives?
« on: August 05, 2011, 03:06:57 PM »
Hi

i'm using avast 6 under windows 7

can i scan rookits drives ?

i mean every time i perform a rookit scan , avast scans my windows 7 volume/partition

can i scan rookits the other drives or volumes/partition ?

thanks
cheers

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: how can i scan for rookit drives?
« Reply #1 on: August 05, 2011, 03:21:00 PM »
Avast automaticly scans for rootkits each time you boot your system.
It also detecs them in real time.
Unless you have disabled it in the settings.
Avast scans all drives for rootkits if/when needed.

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #2 on: August 05, 2011, 05:40:41 PM »
Avast automaticly scans for rootkits each time you boot your system.
It also detecs them in real time.
Unless you have disabled it in the settings.
Avast scans all drives for rootkits if/when needed.
how do i perform an on deman rookit scan of my partions (outside my os) ?

thanks

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #3 on: August 05, 2011, 05:48:01 PM »
how do i perform an on deman rookit scan of my partions (outside my os) ?

Create a custom scan.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #4 on: August 05, 2011, 06:27:01 PM »
how do i perform an on deman rookit scan of my partions (outside my os) ?

Create a custom scan.
yes and????
i have quick and deep rookit scan
i can select the partition to scan
i mean i can perform a normal scan , but the rookit scan scans only my windows 7 partition ??? ???

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #5 on: August 05, 2011, 06:28:36 PM »
yes and????
i have quick and deep rookit scan
i can select the partition to scan
i mean i can perform a normal scan , but the rookit scan scans only my windows 7 partition ??? ???

Sorry, not sure what you mean.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #6 on: August 05, 2011, 06:34:20 PM »
yes and????
i have quick and deep rookit scan
i can select the partition to scan
i mean i can perform a normal scan , but the rookit scan scans only my windows 7 partition ??? ???

Sorry, not sure what you mean.
i want to perform a rookit scan of my D: E: and :F
my windows 7 is C:
how can i do ?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #7 on: August 05, 2011, 06:52:24 PM »
i want to perform a rookit scan of my D: E: and :F

Why..? Are they bootable..??
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #8 on: August 06, 2011, 06:51:45 AM »
i want to perform a rookit scan of my D: E: and :F

Why..? Are they bootable..??
E: and F: yes they are bootable

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #9 on: August 06, 2011, 08:00:29 AM »
E: and F: yes they are bootable

Hmm...
Sorry, not sure, if this can be done..?!
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #10 on: August 06, 2011, 11:24:35 AM »
E: and F: yes they are bootable

Hmm...
Sorry, not sure, if this can be done..?!

i mean on gmer.exe i can scan E: D: F: .....

gmer is part of avast now , i guess

could i do with avast like gmer ?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #11 on: August 06, 2011, 11:34:23 AM »
gmer is part of avast now , i guess

Yes, he's part of the team.
The latest version of his tool is here: http://public.avast.com/~gmerek/aswMBR.exe
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #12 on: August 06, 2011, 02:38:56 PM »
in short can i scan for rootkits all my drives ?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: how can i scan for rookit drives?
« Reply #13 on: August 26, 2011, 03:44:37 PM »
Do you have a multiboot system?
If so, you have to run a scan from each one of them.
Only the drive/partition that is booted from is scanned.
Because that is where the OS is and where a rootkit will be.

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #14 on: August 26, 2011, 04:12:04 PM »
Do you have a multiboot system?
If so, you have to run a scan from each one of them.
Only the drive/partition that is booted from is scanned.
Because that is where the OS is and where a rootkit will be.
yes i have a multiboot system
Quote
If so, you have to run a scan from each one of them.

what do you mean ?
have i to install avast in ever os?