Virus running in operating memory question

Discussion in 'NOD32 version 2 Forum' started by Unknown01, Jun 29, 2004.

Thread Status:
Not open for further replies.
  1. Unknown01

    Unknown01 Registered Member

    Joined:
    May 5, 2004
    Posts:
    10
    Does anyone know when NOD32 says a virus or other infected file is running in operating memory does that mean that the virus has made registry changes and/or registered dlls etc. . .
     
  2. arrowsmithmidwest

    arrowsmithmidwest Registered Member

    Joined:
    May 12, 2004
    Posts:
    165
    Location:
    Midwest
    from my point of view...

    no, it doesn't necessary mean that it has changed registry, it just is located in memory, you can try things like dumping your memory, clearing your pagefile, shutting down PC and trying to remove in safe mode,

    i havnt dealt with that many viruses in memory but the ones i have sorted them out, can't remember exactly how but.
     
Thread Status:
Not open for further replies.