A lot of us have asked questions but unfortunately a few responses have been ‘I think that’ instead of a definitive answer. Could vlk or igor or another from the Alwil team please answer the following:
a) does a scheduled boot scan include a deep scan or quick scan?
b) does switching on one’s computer include any rootskin scan from (i) cold or (ii) warm restart ?
c) a manual scan covers rootkit but is it always deep
Thanks
Boot time scanning is through, deep scan.
Both cold and warm restart will have rookit scanning while booting.
The quick scanning does not include rootkits. The deep one yes.
The Quick scanner (ashQuick.exe or the Explorer extension) does not include rootkit scannings.
Thanks Tech, that about covers it.
What is a warm restart btw?
I suppose is when your computer is not powered off from the AC, it does not get ‘cold’.
Cold boot is turning off the power and on again.
On my system there is a reset button and a power button, I guess that could be termed a warm start (not powering down) and there is also a software restart, like the Restart button on the Windows, Start, Turn Off Computer, Restart.
I was asking the original poster, just to avoid any confusion (the term “warm restart” is used quite vaguely).
To clear things up, the rootkit scan will only take place after real Windows boot. I.e. not after a resume from hibernation (or sleep).
Vlk
Resume is not boot… but, indeed, the user could have mess things.