Is scanning the computer in safe mode better than in normal mode?

Is scanning the computer in safe mode better than in normal mode?

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Is scanning the computer in safe mode better than in normal mode? Shaun13 04-11-2007
Posted by =?Utf-8?B?U2hhdW4xMw==?= on April 11, 2007, 1:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I read that scanning antivirus/antispyware in safe mode is better because it
can scan out some virus or spyware that can't be scanned in normal mode. Is
that true?

Off topic: I read about the safe mode thing from http://www.castlecops.com/.
I find most of what it says helpful, but if anyone can tell me whether i can
trust that website, that would put my mind at ease when Im posting for help
there.

Posted by Nick Domukhovsky on April 11, 2007, 1:26 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> I read that scanning antivirus/antispyware in safe mode is better because it
> can scan out some virus or spyware that can't be scanned in normal mode. Is
> that true?
Yes. Some viruses link themselves with important system resources and
cannot be stopped or deleted in normal mode... But on the other hand,
some viruses cannot be deleted in a safe mode too :)



--
With best regards
Nickolay Domukhovsky, MCSA

Posted by Hayman Ezzeldin on April 11, 2007, 2:32 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Dear Shaun,
The good thins about Safe Mode, is that it loads only what is necessary for
the operating system to load, you can make sure of that by checking the
services running, so if a virus is attached to any of the non windows
services, so you can delete this file infected. Because normally, you can't
delete a file if it's opened or loaded in the memory.

Concerning the CastleCops website, it's well known in the world of
Information Security, so there is no harm at all to deal with it. My advice
is "Don't depend on one source for information, try to get the same
information from 2, or 3 sources, this will put you on the safe side"

Some of the very very respected website and they are very helpful, and their
newsletters are WOW:
http://www.windowsnetworking.com/
http://www.windowsecurity.com/
http://www.msexchange.org/
http://www.msterminalservices.org/
http://www.isaserver.org/

Best regards.

>I read that scanning antivirus/antispyware in safe mode is better because
>it
> can scan out some virus or spyware that can't be scanned in normal mode.
> Is
> that true?
>
> Off topic: I read about the safe mode thing from
> http://www.castlecops.com/.
> I find most of what it says helpful, but if anyone can tell me whether i
> can
> trust that website, that would put my mind at ease when Im posting for
> help
> there.



Posted by siljaline on April 12, 2007, 2:42 am
If you were  Registered and logged in, you could reply and use other advanced thread options
"Shaun13" wrote:
>I read that scanning antivirus/antispyware in safe mode is better because it
> can scan out some virus or spyware that can't be scanned in normal mode. Is
> that true?

While it is true that less programs run in Safe Mode, it is really not necessary.

> Off topic: I read about the safe mode thing from http://www.castlecops.com/.
> I find most of what it says helpful, but if anyone can tell me whether i can
> trust that website, that would put my mind at ease when Im posting for help
> there.

Some of the best Security Experts - including MVPs, are members and post and
answer queries at Castle Cops - you may rest at ease posting there!

Silj

--
siljaline

MS - MVP Windows (IE/OE) & Windows Security, AH-VSOP

Security Tools Updates:
http://aumha.net/viewforum.php?f=31
Please reply to group, as return address is invalid that we may all benefit.



Posted by S. Pidgorny on April 12, 2007, 5:08 am
If you were  Registered and logged in, you could reply and use other advanced thread options
G'day:

> "Shaun13" wrote:
>>I read that scanning antivirus/antispyware in safe mode is better because
>>it
>> can scan out some virus or spyware that can't be scanned in normal mode.
>> Is
>> that true?
>
> While it is true that less programs run in Safe Mode, it is really not
> necessary.

Alternative boot media beats that - and is indeed offered by some vendors
(WinPE discs).

>> Off topic: I read about the safe mode thing from
>> http://www.castlecops.com/.
>> I find most of what it says helpful, but if anyone can tell me whether i
>> can
>> trust that website, that would put my mind at ease when Im posting for
>> help
>> there.
>
> Some of the best Security Experts - including MVPs, are members and post
> and
> answer queries at Castle Cops - you may rest at ease posting there!

Details on MVPs there: http://wiki.castlecops.com/Microsoft_MVP


--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *



Similar ThreadsPosted
safe mode antivirus July 29, 2005, 2:55 am
Virtumondo and safe mode, HELP! January 11, 2006, 11:03 pm
Safe Mode with Networking September 12, 2007, 7:00 pm
Internet connection in safe mode December 7, 2005, 9:06 pm
Safe mode with command prompt, networking December 31, 2005, 7:39 pm
can not edit Local Users and Groups in safe mode October 14, 2007, 5:38 pm
What is ECB mode in 3DES July 31, 2006, 5:27 am
AVS and Firefox in hidden mode? April 30, 2007, 8:43 pm
Running WWW Service in IIS 5.0 Isolation Mode... January 9, 2006, 8:04 pm
IPSec Tunnel vs Transport mode vs Filter January 24, 2007, 1:31 pm

The site map in XML format XML site map

Contact Us | Privacy Policy