files locked

[snowbound]

Hi everyone :)

When i do a scan with nod32 there are always some files locked so they can't be scanned.

(see screenshot, sorry iam not very good at it) ;)

I have nod set to scan all files. I know why spybot is locked because it is password protected.

Is there some way i could scan these files? Should i even worry about it?

I'm a newbie so i'm not exactly sure about this. ;D


Thanks


Snowbound

[nameless]

Hi Steve, ;)

As the comment at the bottom of your screen shot indicates, those files cannot be opened for scanning because the owning application (in some cases, the Windows kernel itself) has them marked as "open exclusive", which means "don't let any other process touch this".

The only way around this is to either close the application which has the file opened, and, where that isn't possible (such as for pagefile.sys and the registry hives), to scan the files outside of that Windows environment. This isn't practical or necessary, IMO, because locked files are not at risk of infection to begin with.

For files that are held open by an application, here are a couple handy freeware tools, courtesy of Sysinternals:

Process Explorer (http://www.sysinternals.com/ntw2k/freeware/procexp.shtml) (requires debug privileges to run)

Handle (http://www.sysinternals.com/ntw2k/freeware/handle.shtml) (command line utility; works great as a shell extension with a batch file, requires administrative privileges to run)

[snowbound]

Hi Nameless ;D

Thanks for easing my mind on this.

I was worried about risk of infection but u say if they are locked this is no problem.

I will look into those 2 apps also.
They look very interesting.


Thanks again




Steve er snowbound ;)