Quote:
Originally Posted by incynr8  Norton Corp should pickup on EVENT, such as file access or local execution. It will not scan the entire volume upon mounting. |
Yep. The reason I brought this all up was because I was trying to help a user out by using some software on my memory key (before I knew about the rootkit). Then for some dumb reason I plugged it into my workstation later on and gave myself the rootkit. Then I had to format my workstation and the key (on a soon-to-be-returned-to-IBM-rental-laptop). My workstation has SAV Corp. on it but it didn't even flinch. Very annoying.
I just kept wishing I could have a bit of software that could act as an airlock of sorts where I could scan the contents with whatever I needed.