Memory Scan Only

[ragweed]

Can someone tell me what to do to scan temporary files in memory? I have Avast 6 & it saved me twice already from nasty viruses!

[DavidR]

You can create a Custom Scan and only select memory to be scanned. Thought there are two things to beware of.

1. there is no differentiation between what you call temporary files in memory, essentially all files in memory are temporary, so they are all scanned.

2. when doing a Custom scan in which you have elected to scan Memory you can get detections in memory from other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don't be too surprised if it finds some in memory.

Personally as has been said before if you have a virus in memory, it is a bit late as it has already run.

[ragweed]

You can create a Custom Scan and only select memory to be scanned. Thought there are two things to beware of.

1. there is no differentiation between what you call temporary files in memory, essentially all files in memory are temporary, so they are all scanned.

2. when doing a Custom scan in which you have elected to scan Memory you can get detections in memory from other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don't be too surprised if it finds some in memory.

Personally as has been said before if you have a virus in memory, it is a bit late as it has already run.

OK...Thanks David! Just ran it & it came back Clean.!!

[DavidR]

You're welcome.

[XerjieDrex30]

when i scan in memory avast 6.0.1367 found out this... is this dangerous? should i move to chest or remove it now or do nothing?  :'(

[Gargamel360]

is this dangerous?

Doubt it.

Not entirely sure about the last 2. 

But the ones connected to mbamservice can be ignored for sure.

[Pondus]

The last 2 are not detections, but scan errors.....

The rest is detections of Malwarebytes signatures loaded in memory....

should i move to chest or remove it now or do nothing?

you will see that the apply button is grey, this is bc it is a process and not a file detected....and you cant move a process to chest   


anyway, you should not play with the scan settings if you do not know the result
DO NOT use the "scan memory" settings as this will give some strange scan results...
use the default quick / full scan with default scan settings

[XerjieDrex30]

Thanks a lot......