View Full Version : scan System volume information with nod32
Futurist
October 28th, 2009, 11:41 AM
HI!Today, i've used Superantispyware, and it has found a trojan in "System volume information"( I see that scan every files of it... So, I Decide to scan it, ( for verifying) with nod32, but it say me "scan completed successfully, number of scanned objet 0.. How is it possible?TNX
Marcos
October 28th, 2009, 12:38 PM
Perhaps you don't have read permissions to that folder?
ccomputertek
October 28th, 2009, 12:47 PM
-{ Quote: "Perhaps you don't have read permissions to that folder?" }-
He must have permission if SAS did it, or SAS scan a different way and doesn't need permission, or mabe he needs to check his NOD settings, I bet systemvolumeinformation would be considered an archive or something.I would set every option in NOD for on demand type scans or mabe the right click context scan and scan the folder again.
Futurist
October 28th, 2009, 12:50 PM
?? i don't undestand..Marcos.. what i must do for scan the "sytem volume information"?
Marcos
October 28th, 2009, 01:07 PM
Can you navigate to that folder and see the files inside?
Futurist
October 28th, 2009, 01:12 PM
hi ccomputertek ! i've selected every option in Setting (on domand) except:email files, preserve last access timestamp.In "object" is all selected except mail Efiles, but System volume information is not scanned.. which option i've selected for scan it??
Thank you for your replies :)
Futurist
October 28th, 2009, 01:13 PM
-{ Quote: "Can you navigate to that folder and see the files inside?" }-
no, i cant' navigate or see the files inside...but Superantyspyware scan everyfiles into that folder ??? ??? :blink:
ccomputertek
October 28th, 2009, 01:16 PM
Like marcos said then, right click that folder which must first be unhidden, then add administrator and system full access to it, from the security tab of folder properties.
you know how to unhide system files and folders ?
Futurist
October 28th, 2009, 01:19 PM
-{ Quote: "Like marcos said then, right click that folder which must first be unhidden, then add administrator and system access to it, from the security tab of folder properties." }-
yes...but , i don't undestand how the Superantispyware scan it, every files of that folder...finding a trojan ecc...:( :(
Marcos
October 28th, 2009, 01:23 PM
Maybe SAS is run in the Local System Account like a scheduled on-demand scan.
Futurist
October 28th, 2009, 01:26 PM
i have selected depth scan in costum scan, every option is select and i've selected the folder "system volume information" but... nothing...
what I' must selected for scann it?
ccomputertek
October 28th, 2009, 01:29 PM
Did you grant yourself full access to the folder so you can view it and all it's subfolders first ?
Futurist
October 28th, 2009, 01:40 PM
-{ Quote: "Did you grant yourself full access to the folder so you can view it and all it's subfolders first ?" }-
mmm:shifty: .. how I must do for full access to the folder?
ccomputertek
October 28th, 2009, 01:46 PM
213367
ccomputertek
October 28th, 2009, 01:47 PM
maybe take ownership of it also for admin.
Futurist
October 28th, 2009, 01:51 PM
-{ Quote: "maybe take ownership of it also for admin." }-
I've Xp service pack 3..i don't have that screen shot :( :( uff
Futurist
October 28th, 2009, 01:54 PM
it is my home pc!
ccomputertek
October 28th, 2009, 01:55 PM
Should be the same from advance options button.Just click add and put admin and system in there and check the full control box.To add them you have to click add , advanced and find now to get the list of accounts to add.
Futurist
October 28th, 2009, 01:57 PM
ccomputertek! Now I must go out.. here is the 19.00 Pm! as soon as possible I'll answer you!
Futurist
October 28th, 2009, 06:03 PM
-{ Quote: "Should be the same from advance options button.Just click add and put admin and system in there and check the full control box.To add them you have to click add , advanced and find now to get the list of accounts to add." }-
hehehe i'm writing you at 23.00 pm, I've resolved!!!!!!!!!!!!!!! eheh I've reboot the pc in provvisory mode, and switch permission "sostuisci proprietario in sottocontenitori ecc.." e ta daaaaaaaaaaaaaaan eheheh
Thank you so much!!!!!
ps: is there an italian ufficial forum?
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums