spleenharvester

Scan without restart?

Recommended Posts

If I update EEK, can I scan without restarting? It appears to be scanning (but the computer is not infected so I have no way of knowing if the updated definitions are being used!)

 

The reason I ask is that EEK is being used in a Windows PE image, and Windows PE opens into a read-only virtual drive (so EEK has to be updated after each boot since all changes are lost). I understand it's not designed for use in this context but it's the only 64-bit portable malware scanner that seems to work in Windows PE.

 

Thanks!

Share this post


Link to post
Share on other sites

Hi spleen smile.png

I think GT500's post below answer part of your question.

http://support.emsisoft.com/topic/19646-update-settings/#entry145435

Basically, you can choose not to check for updates/upgrades of EEK, but it means that you might have outdated definitions and/or version of the program, which will affect its potential to detect and remove malware.

Share this post


Link to post
Share on other sites

If you want to update EEK when running from a PE environment, you will have to copy it to some sort of read/write media (such as the hard drive of the computer being scanned) in order for it to save its updates.

Program updates will require EEK to be restarted, but not the computer. Database updates do not require a restart.

Please also note that scanning an offline system from a PE environment is not recommended, since detection capabilities will be limited due to lack of Windows registry access, and System File protection that is built in to EEK will not function as expected and thus there are certain unfortunate risks posted by running from a bootable disk (or from another computer that you have connected an infected hard drive to).

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.