A-Squared and Process Memory Scan

Discussion in 'other anti-trojan software' started by Defenestration, May 30, 2005.

Thread Status:
Not open for further replies.
  1. Defenestration

    Defenestration Registered Member

    Joined:
    Jul 17, 2004
    Posts:
    1,086
    Why does the Mem usage of each process increase to it's Peak Mem Usage (or very near it) when A-squared performs it's Process memory scan ?

    I can guess that it's because the scan forces all memory used by the process to be paged back into RAM. If this is the case, I have to ask why no other scanner I'm running has the same effect when performing Process memory scans ?

    Also, to save me from creating a separate thread, I have a couple of requests for A-squared:

    1) All Process memory space should not be scanned everytime a file is scanned.

    2) It should be possible to right-click a file and scan with A-squared, instead of only being able to select a folder for scanning.
     
  2. Andreas Haak

    Andreas Haak Guest

    There is currently only one other memory scanner that really scans the WHOLE process memory for code injected by Backdoors like Flux etc. - its ewido and you will see exactly the same beheaviour there.

    The scanner options will be saved with v1.7.

    I will ask Pascal to change that for the next version, too.
     
  3. iwod

    iwod Registered Member

    Joined:
    Jun 25, 2004
    Posts:
    708
    ?? i thought 2.0 is coming out?
     
  4. Infinity

    Infinity Registered Member

    Joined:
    May 31, 2004
    Posts:
    2,651

    Maybe you can change your sig :D
     
  5. Defenestration

    Defenestration Registered Member

    Joined:
    Jul 17, 2004
    Posts:
    1,086
    Thanks Andreas. That's what I thought was happening but just wanted confirmation.


    Thanks again.
     
Thread Status:
Not open for further replies.