• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

Kudos0

Do you run NIS scan on GHOST backup ext. drive too?

When you run a NIS Full System Scan, do you need to also scan the external drive where you save your GHOST recovery points?

Seems like you should.  But, this really increases the time it takes to run a scan.

Appreciate any thoughts.

Robby

_________________________________

System: NIS 2010; GHOST 14; 2004 Toshiba 17" laptop; 80GB internal C-drive , 80GB external F-drive for GHOST; 1.5GB mem; 3.1GHz dual-core cpu.

RobbyGHOST15,Win 8.1,quad-core 2.8GHz Toshiba 17" laptop, 750GB HDD

Replies

Kudos0

Re: Do you run NIS scan on GHOST backup ext. drive too?

Robby

Just me speaking

If all of the data backed up on the drive has already passed a scan or two before it was copied there I wouldn't scan again.

However, if I have a problem I scan all six drives with everything I have available to be very sure I've cleaned out every corner

Dick Win 10x64 current current NSBU
Kudos0

Re: Do you run NIS scan on GHOST backup ext. drive too?


dickevans wrote:

Robby

Just me speaking

If all of the data backed up on the drive has already passed a scan or two before it was copied there I wouldn't scan again.

However, if I have a problem I scan all six drives with everything I have available to be very sure I've cleaned out every corner


Tks for reply, Dick.  I think I got problems.  So, guess scanning the ext. drive is the thing to do.

Robby

RobbyGHOST15,Win 8.1,quad-core 2.8GHz Toshiba 17" laptop, 750GB HDD
Kudos1 Stats

Re: Do you run NIS scan on GHOST backup ext. drive too?

Hi Robby,

When you say "Ghost recovery points" are you talking about image backups or File & Folder backups? If you are referring to image backups (v2i and iv2i files), I don't think running a scan on your external backup drive is going to give you the level of scan you want as I don't believe NIS can read inside these Ghost archives.

I just tried this and it finished way too fast for it to have been the level of scan you are obviously looking for.

If you have only File & Folder backups then this will work fine.

For image backups I would suggest going to Windows Explorer and right click on the image backup file (v2i or iv2i as appropriate) and select Mount. This will mount your recovery point as a virtual drive letter. You can then run a full scan on that virtual drive letter so that the individual files can actually be scanned in their entirety.

Be careful to NOT run anything on that drive, simply mount and scan and then you can dismount the drive when you are done.

ALSO, be aware that if you have malware hiding inside a Windows system recovery point NIS will not find it since it is not allowed to make changes to a recovery point anyway. (Windows will not allow this). So any time you suspect malware and have cleaned up your computer it is always advised to disable System Restore, reboot your computer and then enable system restore again and create a fresh restore point.

Why do you suspect malware infection of some kind? Have you tried a scan with the free version of MalwareBytes?

You can do this as follows.

Please download, install, update and run the free version of MalwareBytes following the procedure outlined below. Any other recommendations will follow after you have a chance to provide any other details requested.


Please go to www.malwarebytes.org

Download the free version of MalwareBytes only, do not get the paid version as it will interfere with your Norton product. Please ensure that the "Update MalwareBytes" and "Launch MalwareBytes" options are checked during installation.

Then scan your computer using the full scan option. When scanning is completed, please click on "Show Results". Make sure that all detected threats are checked and click on "Remove Selected".


Please attach the MalwareBytes log to your post using the "Add Attachments" link at the bottom of the reply editor.


Restart your computer and see if your original problem is still present.


Note: Sometimes the main site is blocked from attempts to download MalwareBytes. If this occurs please try to download from:http://www.filehippo.com/download_malwarebytes_anti_malware/

Please do not download the Spyware Doctor which you will see on this page!

Please let us know how it goes.

Best wishes.

Allen

Windows 7 Ultimate SP 1, 64 bit, 32 GB * NIS Vers. 21.6.0.32* Ghost 15 * IE 9, Firefox, Safari. Test laptop with W7 Home Premium 64 bit * NIS Vers. 21.6.0.32
Kudos0

Re: Do you run NIS scan on GHOST backup ext. drive too?

Tks for the reply, AllenM.  Nice to "talk" w/you again -- and appreciate all the useful info (as usual).

Yes, when I say "recovery point" I mean the entire C-drive contents and its incrementals, via GHOST.  No "folders/files" things.

I'll try the "Mount."  Would like to scan my external drive.  Strange things happening (long story).  But, one in particular recently -- did a Full System Scan on April 9th -- it ran for 7-hrs and never finished. [ I had to go to bed, so cancelled.]   Thought maybe a problem area was that the scan went into my external (F) drive.  Yet even then -- shouldn't take that long for only (2) 80GB drives (C and F)??

And, on the System Recovery Point issue: Seems like I did a Full System Scan, some time back (year or so ago), and within NIS told it NOT to ignore the System Volume Information area.  Indeed it then found a really bad virus there that had been doing bad things to my system.  So, nowadays I always scan the SVI area.  Maybe I'm not remembering this right?

I've tried MalwareBytes in the past on several occasions (2-3 years ago) when I suspected a root kit [still wonder about that].  MB didn't seem to do anything that NIS wasn't already doing.  But... if I continue to have problems I may try it again.

Kindest Regards,

Robby

RobbyGHOST15,Win 8.1,quad-core 2.8GHz Toshiba 17" laptop, 750GB HDD

This thread is closed from further comment. Please visit the forum to start a new thread.