ksiemb Posted July 13, 2011 ID:453439 Share Posted July 13, 2011 Someone who is infected ran MBAM from a slave drive. Wouldn't that cause MBAM to scan the slave drive & not the infected primary drive ?I thought MBAM had to be installed on the drive the drivers were on, although in his case they would both be on the primary & secondary. Link to post Share on other sites More sharing options...
Firefox Posted July 13, 2011 ID:453453 Share Posted July 13, 2011 If you run a full scan, you can select different drive letters to scan. Hope this is what you mean.... Link to post Share on other sites More sharing options...
ksiemb Posted July 13, 2011 Author ID:453458 Share Posted July 13, 2011 No, This is what I mean. He had MBAM installed on C: Drive. Somehow, he became so infected, MBAM, nor Rkill, nor any other Antivirus would run.So he downloaded and Installed MBAM again on the Slave drive, and ran a scan, which came up with no results.Did the scan running from the slave drive actually scan the C: Drive ? I thought MBAM did not have a portable version, which I think is what this would be.I know if you run a full scan you can select drives. Link to post Share on other sites More sharing options...
Firefox Posted July 13, 2011 ID:453468 Share Posted July 13, 2011 Well, more than likely what was done is they got the infected drive (C:) and plugged it into another computer as a slave drive so it was not D: drive. They then performed a scan on that drive. I am sure Malwarebytes picked up some infections, but this is not recommended as this can cause that drive to become non-functional. Also it would not be able to scan the registry. In essence, once that drive is plugged back into the original system, it either won't boot, or it would still be infected.If the computer has two hard drives, say C: and D: and it is infected, if it is so infected that you can not run tools on it or even install Malwarebytes on the C: drive, its not going to let you install anything on any drive regardless. Link to post Share on other sites More sharing options...
ksiemb Posted July 13, 2011 Author ID:453472 Share Posted July 13, 2011 I believe he had a dual boot system to be able to install on the INTERNAL scdy drive. assuming he did install & run, what happens ? Link to post Share on other sites More sharing options...
Firefox Posted July 13, 2011 ID:453475 Share Posted July 13, 2011 I believe that even in a dual boot environment, it would basically be the same concept I described, you would be scanning the other systems C: drive as a slave, so you would run the risk of damaging that OS install. Link to post Share on other sites More sharing options...
ksiemb Posted July 13, 2011 Author ID:453487 Share Posted July 13, 2011 Very Well - Thanks Firefox ! Link to post Share on other sites More sharing options...
Firefox Posted July 13, 2011 ID:453497 Share Posted July 13, 2011 Your quite welcome.... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted July 13, 2011 Root Admin ID:453512 Share Posted July 13, 2011 The program will scan a slaved drive but since there are no launch points it basically becomes a flat file scanner which your Anti-Virus is much better at than ours. We work best when running on the actual infected live running OS. Link to post Share on other sites More sharing options...
ksiemb Posted July 13, 2011 Author ID:453551 Share Posted July 13, 2011 The program will scan a slaved drive but since there are no launch points it basically becomes a flat file scanner which your Anti-Virus is much better at than ours. We work best when running on the actual infected live running OS.And that explains why there is no portable version, and probably won't be. LOL - That was a question ! Link to post Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now