The Root, Windows\System32 directory and its Drivers subdirectory.Load Points (Startups) and the files they reference.The Norton Power Eraser thoroughly and quickly (in about a minute) scans those system areas and load points that malware is commonly known to tamper with so it can invade and compromise a system. A ROOTKIT SCAN requires a RESTART so NPE can load its boot load driver and perform low-level scanning for rootkits. Again, I chose the more thorough INCLUDE ROOTKIT SCAN by selecting the RESTART Button. I selected the more thorough SYSTEM SCAN, and was then presented with Two more Options: INCLUDE ROOTKIT SCAN or EXCLUDE ROOTKIT SCAN. When the SCAN Button is selected, NPE offers the choice of a SYSTEM SCAN or more limited DIRECTORY SCAN.
I confirmed this by having Process Explorer and TCPView running in the background while I was testing The Norton Power Eraser. NPE also establishes a network connection to update, and to enable the user to send samples to Symantec for Remote Analysis with immediate feedback, but those connections are closed once the program is closed, or the samples are sent. SMR is an acronym for NPE's 'Symantec Maximum Repair" scanning technology. It extracts and its own kernel driver SMR161.SYS when launched, as would be expected when dealing with extremely tenacious, low level threats. NPE downloads and launches from as a single executable NPE.EXE. I also wanted to monitor whether it litters your system with components that have to be manually cleaned up afterward: the quick answer to this is: no, it does NOT litter, and it does an impressive job of cleaning up after what little it does put on your system. I downloaded The Norton Power Eraser (NPE) to investigate whether it delivers on what it claims to (it does). In Symantec's own words, this is Norton Power Eraser's stated purpose: "Eliminates deeply embedded and difficult to remove crimeware that traditional virus scanning doesn't always detect." And this is when the Norton Power Eraser should be used: "You should use Power Eraser only when nothing else will remove the threat and you are willing to accept the risk that the scanner may quarantine a legitimate program." I further elaborate on Symantec's above concerns, in my very important and more specific "Word of Warning" at the end of this article, so p lease be sure to read that!! The bottomline is, be sure you know what you're doing before you use this tool!!!
Symantec's Norton Power Eraser (NPE) targets entrenched malware that's resistant to removal with antivirus and anti-malware programs.
0 kommentar(er)
