Scanning Ntdll.dll and ntoskrnl.exe

Discussion in 'ESET NOD32 Antivirus' started by victor43, Mar 2, 2012.

Thread Status:
Not open for further replies.
  1. victor43

    victor43 Registered Member

    Joined:
    Nov 4, 2009
    Posts:
    43
    Does anyone know whether Eset AV performs a signature scan of the in memory image of these two Window files or does it scan the disk file image ?

    What about the user mode subsystem of the files such as kernel32.dll, user32.dll, gdi32.dll and the like does Eset scan the in memory image or disk image or not at all ?

    Thanks

    Victor
     
    victor43, Mar 2, 2012
    #1
  2. Marcos

    Marcos Eset Staff Account

    Joined:
    Nov 22, 2002
    Posts:
    14,456
    There's no reason not to scan them in the same way as other files, ie. both in memory as well as on the disk.
     
    Marcos, Mar 2, 2012
    #2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...