PDA

View Full Version : Cant delete quarantined files.


fanuelsen
February 10th, 2009, 04:16 AM
Hi!

I got the NOD32 Antivirus Business edition on a fileserver. It finds the virus an quarantines it, but i cant remove it.

When i right click and select remove nothing happens. Something i also find strange is why it says the count is 21000+ and it seems to keep counting.

http://bildr.no/view/343240

Marcos
February 10th, 2009, 04:51 AM
Are the E: and F: drives local? What if you scan them by the on-demand scanner? If the threat is active the scanner should tell you that it'll be deleted after the next restart of the computer.

fanuelsen
February 10th, 2009, 05:36 AM
Yes they are all local drives. Gonna try with the on-demand scanner now, but that takes some time.

Marcos
February 10th, 2009, 06:12 AM
A log from ESET SysInspector (ESI) might show a suspicious file running. Could you please create an ESI log, upload it somewhere and PM me the link so that I can download and check it?

fanuelsen
February 10th, 2009, 10:13 AM
How do i run sysinspector? I can only find sysinspector on the ESET server. Cant find it on the server with the nod32 business antivirus on it.

Thanks for any help btw.

EDIT

Found the sysinspector. Gonna run it now.

http://idisk.mac.com/fanuelsen-Public?view=web <--- Download the file here.

fanuelsen
February 11th, 2009, 03:18 AM
It diden`t help to run the On Demand scanner. All the files are still there.

fanuelsen
February 12th, 2009, 02:42 AM
Anyone have any suggestions? ::)

funkydude
February 12th, 2009, 08:17 AM
{QUOTE-> Anyone have any suggestions? ::) <-QUOTE}

Yes, PM him the log like suggested, and insert a link to this thread.

fanuelsen
February 12th, 2009, 08:38 AM
There is a link in the post above. But im gonna PM him the link.

Marcos
February 12th, 2009, 08:52 AM
I for one couldn't find anything suspicious in the ESI log. Couldn't it be that the folders are shared and the malware is continually copied there from another computer in your network?

fanuelsen
February 13th, 2009, 03:18 AM
Thank you for your time. I`m gonna try to reboot it in safe mode next week when the student`s have there winterbreak. It`s a file server so could be a sharing problem yes.