Author Topic: how can i scan for rookit drives?  (Read 6812 times)

0 Members and 1 Guest are viewing this topic.

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #15 on: August 26, 2011, 10:38:50 PM »
have i to install avast in ever os?

No, just use the tool..! ;)
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #16 on: August 27, 2011, 05:55:23 AM »

SHARKY7SHARKY

  • Guest
Re: how can i scan for rookit drives?
« Reply #17 on: August 28, 2011, 01:41:02 PM »
I havn't read all this but why can't you right click on each drive & scan

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: how can i scan for rookit drives?
« Reply #18 on: August 28, 2011, 01:43:04 PM »
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

mantra

  • Guest
Re: how can i scan for rookit drives?
« Reply #19 on: August 30, 2011, 07:13:34 AM »

ady4um

  • Guest
Re: how can i scan for rookit drives?
« Reply #20 on: August 30, 2011, 10:33:06 AM »
it scans only my windows7 no the other os

Sorry to interrupt. Why do you think a boot scan only scans one volume? The idea of a boot scan is to try to scan vulnerable areas/processes/files that are part of the boot process (of your OS, yes) before your Windows GUI is available for you.

Other volumes (partitions) and other OSs installed in the same hardware (multiboot) are not part of the specific boot process before Avast. This means that whatever is there in those other partitions and OSs can be scanned by Avast without the risk that some malware is hidding itself before Avast can take action (scan those other areas). That is, if your Windows OS can also have access to those other volumes (partitions).

I'm not saying that Avast would be able to scan and identify "everything" of "any" other OSs in your multiboot configuration, but since other OSs are not being part of the boot process (in that specific boot cycle), then a malware in those other areas can't be hidding itself before Avast.

Of course, I might be wrong too :).