"Full" Scan is NOT!

[ohso]

Win XP Home+SP2+updates
1 admin acct, 3 limited user accts

SD with AV, 5.5.0.178
db 5.09240, 664,689 sigs, AV engine 4.4.2

This morning I ran a _full scan_ from the admin acct. It found nothing. I logged completely out of the admin acct and went into one of the limited user accts (mine). For some reason, curiosity I guess, I opened SDwAV and ran an intelli-scan under my limited user acct. I had never done that before (always ran a full scan under the admin acct). Imagine my surprise when it came up with 1 threat, 2 infections. I was so surprised that I didn't write them down before I clicked on "fix it".

I then logged out of my acct and went into user acct #2. Intelli-scan found 3 threats, 6 infections: Adware.BookedSpace, Adware.SVAPlayer (3), Exploit.internet_explorer_security_settings (2). I clicked on fix it.

I logged out of that acct, logged into user acct #3, and ran intelli-scan. It found 2 threats, 4 infections: adware.booked.space, adware.svaplayer (3). I clicked on fix it.

So why does a full scan from the admin acct not find threats/infections in the _user_ accts under XP? The admin acct certainly has priviledges to see the whole disk.

Now I'm worried that I also need to do a _full scan_ under _every_ acct on the computer! The time that would take would not be acceptable, since a full scan under the admin acct takes 1.5 hours now.

[AChen]

Hi Ohso,

In order for SD to detect and remove Cookies and Temporary Internet files from other user accounts, the user accounts need to be active. Therefore if a user account is not active, then SD will not remove Cookies or Temporary Internet files.

[ohso]

If I log into all accts and use "switch user" instead of logout to exit each acct, leaving all the accts "active", can I then go in to the admin acct and run a full scan and have it check _absolutely everything_?

What about a second hard drive? Is that checked?

[AChen]

1. Yes. As long as each user account is active it will check everything.
2. A Full scan will check every partition :)

[tom.tdw]

maybe this is something that should be fixed?

[AChen]

maybe this is something that should be fixed?

I have passed this on and hopefully will be resolved in future versions :)

[ohso]

1. We need to be told when this glaring omission has been fixed so that we no longer have to go into every user acct before we run a so-called full scan.

2. With the current software, are there any _other_ things that do not work right (are not checked) when all user accts are not active?

[Reversemidas]

Hi. Would it do a true "full scan" if I ran it in safe mode?

[c_edge]

Hi. Would it do a true "full scan" if I ran it in safe mode?

Running a scan in safemode or normal mode would actually do the same thing unless there is a potential conflict or a process which is in use not allowing you to remove a particular infection.

Hope that helps.
c_edge

[The PIT]

Can't understand why you have to be logged on to each account for it to check internet files and temp files. Surely when you're logged on as Admin you have rights anyway unless someone's been fiddling.
Certainly needs fixing asap.