PDA

View Full Version : Offine scanning would be cool ...



cst0ne
2008-09-15, 17:34
It would be cool if SB S&D could be used to perform an offline scan of an infected hard drive

spybotsandra
2008-09-15, 19:12
Hello,

There are different ways to search for spies. One would be to search the complete registry and harddisk for suspicious entries and files. That can take a lot of time.

Spybot-S&D takes advantage of the fact that all spies have to anchor themselves at a few places over the system to get active. It starts to search at these places, following the information gathered there to catch the whole spy.

So it is not necessary to make your own scan on every drive. Spybot-S&D usually scans all internal harddisks automatically. But a general recommendation is that you store all incoming files (downloads) in a special folder, and that you set up this folder for a special installer scan. Please have a look at the "Directories" in the "Settings" when you run Spybot - Search & Destroy in "Advanced Mode". There you can add additional harddisks or folders.

Best regards
Sandra
Team Spybot

spybotsandra
2008-09-15, 19:47
Hello,

Or you use the command line parameter /allhives.

Here is a FAQ about what command line parameters are available: http://www.safer-networking.org/en/faq/30.html

Best regards
Sandra
Team Spybot

PepiMK
2008-09-15, 19:49
The command line parameter /allhives (http://wiki.spybot.info/index.php//allhives) does load and scan inactive installations, including the registry, on every hard disk detected.

If you want it even safer, you could also take a look at the boot CD topic in the beta subforum; run from CD, you'll be able to scan from a "read only" operating system even.

spybotsandra
2008-09-15, 19:51
first ;)