Jump to content

I have a newbie Question about SD Cards


Recommended Posts

Hello,

When I scan an SD Card (Context Menu) only scans for folders and files is there an option in EIS "Settings" to scan its MBR, partition table or boot sectors?

When I scan selecting "In-depth scan" As Administrator I got a report like:

Scanned disks, folders and files: Operating memory;A:\Boot sectors/UEFI;C:\Boot sectors/UEFI;A:\;C:\

But NOT right clicking on the SD card only

01eset.jpg.6637235531e74f5cb127d3177253e7ce.jpg

02eset.jpg.59aeff67ca8aecb535d21a2ab1b805b5.jpg

Thanks

Came

Edited by camelia
Link to comment
Share on other sites

2 hours ago, camelia said:

is there an option in EIS "Settings" to scan its MBR, partition table or boot sectors?

To begin with, MBR and partition table are part of the boot sector.

Unless the drive is bootable which by default SD cards are not, I don't believe Eset will scan its boot sectors.

Link to comment
Share on other sites

  • ESET Insiders

You could go into advanced settings and change the threatsense parameters for a context menu scan.

 

Untitled.jpg

Link to comment
Share on other sites

Personally, I would just create a new scan profile. Name it "SD Card Scan." The select boot sectors in the scan options along with whatever other options you desire. Then save it.

This way, you're not "fooling around" changing existing Eset options for the default scanning methods.

Link to comment
Share on other sites

Hello,

I'm confused, do I have to change both settings @stackz and @Marcos suggestion?

1 hour ago, itman said:

Personally, I would just create a new scan profile. Name it "SD Card Scan." The select boot sectors in the scan options along with whatever other options you desire. Then save it.

This way, you're not "fooling around" changing existing Eset options for the default scanning methods.

Yes it is a good idea, but I still don't know, how profiles works, I will start a new topic asking about profiles

Thanks

Came

Link to comment
Share on other sites

Time to get to the bottom of this!

It so happens that I have a SD card drive installed in my PC. So here's what I have discovered. To begin with, I have my autoplay setting for removable drives set to open with Win Explorer. So the following testing reflects the Eset behavior as such.

When the SD card is inserted into the card drive, Eset will display a popup as shown in the below screen shot. If you select the scan option from the popup, the drive boot sector will not be scanned. I believe Eset assumes that is unnecessary since the drive's directories are already opened by Win Explorer. What I did not test is if Eset would scan the boot sectors if your autoplay setting was set at the Win 10 default of "ask."

Eset_Removeable_Scan_Prompt.thumb.png.2fc61fe6276ea0aaa9584826d1540995.png

 

If you want to scan the boot sectors of the SD card, what you have do is the following. Note at this point, it probably is unnecessary to do so since if boot malware is present, you have already been nailed. That is unless Eset has already scanned the boot sectors of the SD card prior to allowing Win Explorer to access the drive? @Marcos, comments needed here:

1. Close the Eset popup.

2. Open the Eset GUI and navigate to "Computer Scan" section. Select "Advanced scans."

3. Select "Removable media scan" and the removable drive to be scan.

When the scan completes, the report will show that boot sectors have been scanned as shown in the below screen shot.

Eset_Removeable_Scan.thumb.png.855aeee0b37bd388fa7b1edab53efee1.png

 

Personally, I don't believe boot malware is a threat unless the PC was actually booted from the removable drive media?

Edited by itman
Link to comment
Share on other sites

Thank you very much! @itman that is what I was looking for!! ?

03ESEET.jpg.2224b9c5f96609108326b3e3df52b6ff.jpg

On 8/27/2018 at 5:47 PM, itman said:

Personally, I don't believe boot malware is a threat unless the PC was actually booted from the removable drive media?

I don't know either but who wants to have a boot malware in their removable media?

Camelia

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...