Jump to content

Malwarebytes

Offline Registry


4 replies to this topic

#1
jbcbussoft

    New Member

  • Members
  • Pip
  • 3 posts
Is it possible to scan the offline registry of a slave drive after it is imported into the online registry of the master drive?

#2
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
I do not believe that is possible.

If I understand correctly, you need to scan the Slave drive using the Full Scan Option. If it finds any infections then quarantine them. Once those files are cleaned out, the registry keys are no longer valid so it wont be able to run the invalid key. Then insert the drive back to the original computer and then run a scan again to clean out the registry.

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#3
jbcbussoft

    New Member

  • Members
  • Pip
  • 3 posts
That is what we do but it doesn't work that way. We set a drive as a slave and scan with the latest definitions. When we put it back more registry and file malware are found. If it were possible to clean the registry in another pc then the bugs wouldn't run.

#4
Firefox

    Forum Deity

  • Trusted Advisors
  • PipPipPipPipPipPip
  • 5,591 posts
  • Gender:Male
  • Location:USA
There could be other infections there, you can try the below listed solution:

follow these instructions & post it in the HiJackLog Forum please

Scan and post logs - read note at bottom in green
If you're having Malware related issues with your computer that you're unable to resolve.
  • Please do not post any logs in the General forum. We do not work on any logs posted in the General forum.
  • Please do not install any software or use any removal/scanning tool except for those you're requested to run by the Helper that will assist you.
  • Using these other tools often makes the cleanup task more difficult and time consuming.
  • If you have already submitted for assistance at one of the other support sites on the Internet then you should not post a new log here, you should stay working with the Helper from that site until the issue is resolved.
  • Do not assume you're clean because you don't see something in the logs. Please wait until the person assisting you provides feedback.
  • There are often many others that require asistance as well, so please be patient. If no one has responded within 48 hours then please go ahead and post a request for review

NOTE: If for some reason you're unable to run some or any of the tools in the first link, then skip that step and move on to the next one. If you can't even run HijackThis, then just proceed and post a NEW topic as shown in the second link describing your issues and someone will assist you as soon as they can.

Posted Image


Dell Precision T5400, Win7 Ultimate 32bit fully updated, Symantec Endpoint Protection,
Watchguard Firewall, Intel Xeon CPU, Dual Quad Core Processors, 4GB Ram,
E5410 @ 2.33GHz, Nvidia Quadro FX570, Raid-1 Dual 500GB Sata 10000 rpm Hard Drives
Dual DVD Burners, IE9, Opera, MBAM


#5
jbcbussoft

    New Member

  • Members
  • Pip
  • 3 posts
I don't have an uncleanable. This is one of the things we do. We clean computers. I was just trying to skip a step in the cleanup process. Rather I was trying to combine two of the steps in the cleanup process. Thanks anyway.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users

Follow Us