TDS-3 and Process Memory Space Scan

Discussion in 'Trojan Defence Suite' started by Defenestration, May 31, 2005.

Thread Status:
Not open for further replies.
  1. Defenestration

    Defenestration Registered Member

    Joined:
    Jul 17, 2004
    Posts:
    1,086
    I have recently added A-Squared to my arsenal, and when it performs a Process memory scan the Mem usage of each process increases to it's Peak Mem Usage (or very near it). I asked the reason why here and was told that only A-Squared and ewido (the new beta) really scan the WHOLE process memory for code injected by Backdoors like Flux etc

    Does this mean that TDS-3 is not scanning the complete memory space of each process ?

    Will this be improved in TDS-4 ?
     
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi there, can't tell this technical part of the question at this moment, have to leave that for Wayne c.s.
     
Thread Status:
Not open for further replies.