startup trace scan scans wrong drive

Discussion in 'Trojan Defence Suite' started by bigroot, Mar 27, 2004.

Thread Status:
Not open for further replies.
  1. bigroot

    bigroot Registered Member

    Joined:
    Mar 27, 2004
    Posts:
    2
    my hard drive is drive H:\ but the trace scan scans drive C:\ on startup. then all of these files show up in the alarm window on drive C:\ but there is nothing in that drive because it is a memory card slot. how do i change the default trace scan to H?
     
  2. bigroot

    bigroot Registered Member

    Joined:
    Mar 27, 2004
    Posts:
    2
  3. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Bigroot, Think your post must have got over looked - sorry :oops:

    I believe the Normal scans is looking at the wrong folder, so navigate to your TDS folder - Config - Scans and open Normal Scan.txt
    Open the file and it should look something like this:

    System Files CRC32
    Live Process Files
    Memory Objects
    Registry & File Traces
    Services & Drivers (NT\2K)
    Scan In C:\


    I believe you just need to change the C:\ to H:\ :)

    Hope this helps - Pilli
     
  4. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    There are some hard-coded C:\<filename.exe> traces, this will be a problem with the current version. Until recently I didn't even know you could have a NON hard drive as C: :)

    You should ignore those traces which come up when using the trace scanner, since you know those files dont exist. You might want to untick the trace scan from the startup scans..

    Traces which are looked for in the Windows and System folders will of course be correct, as TDS will find your Windows folder before checking.
     
  5. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Ah well, Didn't realise that Gavin, thanks for the clarification :)
     
Thread Status:
Not open for further replies.