Scanning Ntdll.dll and ntoskrnl.exe

Discussion in 'ESET NOD32 Antivirus' started by victor43, Mar 2, 2012.

Thread Status:
Not open for further replies.
  1. victor43
    Offline

    victor43 Registered Member

    Does anyone know whether Eset AV performs a signature scan of the in memory image of these two Window files or does it scan the disk file image ?

    What about the user mode subsystem of the files such as kernel32.dll, user32.dll, gdi32.dll and the like does Eset scan the in memory image or disk image or not at all ?

    Thanks

    Victor
  2. Marcos
    Offline

    Marcos Eset Staff Account

    There's no reason not to scan them in the same way as other files, ie. both in memory as well as on the disk.
Thread Status:
Not open for further replies.