Alright to start off I have Avast! Internet Security and today I ran a custom scan that checks absolutely everything just to do a normal check. It took three hours and at the start it said it had found 5 infections. I also run Comodo Killswitch alongside Avast! After looking at the scan logs I see that all the finds were memory blocks and they have all been listed as different infections except one being listed as Drp (Please explain what that is) but they all point to Comodo Killswitch. So did It find a false positive? The information said it was possible its another security program or is Comodo bad? I did a full scan right after with Malwarebytes and this is the result:
The short answer is don’t scan memory in a custom scan, there are literally hundreds of similar posts in the forums.
Detections in Memory - when doing a Custom scan in which you have elected to scan Memory these detections are in memory. Since they aren’t physical files they can’t be moved to the chest, deleted, etc. so there is no action that can be taken, hence the Apply button being greyed out.
The detections in memory are frequently other security applications loading unencrypted virus signatures into memory. Having set off a scan of memory by an antivirus application looking for virus signatures, don’t be too surprised if it finds some in memory.
these other security applications have loaded unencrypted virus signatures into memory.
Was there a particular reason to do this custom scan ?
The Quick or Full System scans should be more than adequate.
It was just to check every nook and cranny on my computer. So there is no Discernible threat It’s just Comodo’s antivirus signatures? Also what is Drp 4 of the 5 listed as Trojans. Also thanks for the advice I’ll be sure to keep it in mind before the next scan.
one being listed as Drp (Please explain what that is)
does it say. malware name [drp]. if so it is short for dropper
A dropper is a program (malware component) that has been designed to "install" some sort of malware (virus, backdoor, etc.) to a target system. The malware code can be contained within the dropper (single-stage) in such a way as to avoid detection by virus scanners or the dropper may download the malware to the target machine once activated (two stage).
[edit]
stick to default scan settings for a problem free avast
you have a virus program with realtime protection running all time in the bacground, checking all files that moves
so a quick scan a week is plenty and will detect any malware running active
i only run full if the quick find anything
