TDS.Unpk and NOD/KAV alert, and no TDS alert ..

[averhuls]

It happened to my pc and by other forummembers.

TDS unpacks a file via the dir:

C:\Program Files\TDS3\xDynamic\TDS.Unpk

and NOD32 or Kapersky alert that there is 'malware' in that dir.

example:C:\Program Files\TDS3\xDynamic\TDS.Unpk\twaintec.dll

What i don't understand is, that if TDS has unpacked this file to examine this, why is there no alert from TDS?
Is it because it is already locked by the virusscanner because that
is able to lock that file faster?

And if you want to remove such a file, this file appears to be locked,
(of course) and you have to manually find out, who locked it, before it can be removed.
It happened to me a few times that both, programs couldn't remove the file,because of the file lock. (both have locked it?)

In fact,bacause of this, i had never saw a trojan alert from TDS yet, only files that couldn't be 'unpacked'.

What is the best way to handle this?

(of course i understand that TDS detects trojans that others don't,
that is why i am running it).

Albert

[Jooske]

We've told you before to close other scanners when using another scanner, including TDS. TDS down't need to be closed completely, only don't have it in an active scan when using other scanners.
We've also told you what is in the Unpk folder is a copy of an original elsewhere on your system and in most cases is deleted after the scanning process or after the next scan, as well you can delete them manually. On my system they're always deleted after the scan automatically, but don't worry if that doesn't immediately happen, don't know why, just delete them.

[averhuls]

I can't close down my virusscanner, that is not a good idea,
it was not scanning the whole drives only resident in memory.
When i start scanning with TDS, TDS unpacks a file in the mentioned directory and THEN the resident-part of the virusscanner comes in.
(I was not scanning that drive.)
BEFORE TDS alerts, that is why i asked this question.
And the files are unpacked by TDS are only there while being unpacked by TDS

Or must i close down my virusscanner completely,(resident part of the virusscanner)
before scanning with TDS ?

[Jooske]

Would try so it can't jump in and block the file for any further access

[Paul Wilders]

-{ Quote: " quoting: unixmagic link=board=5;threadid=27308;start=0#msg157066 date=1081338414]
I can't close down my virusscanner, that is not a good idea" }-

As a matter of fact, it is ;)

-{ Quote: "Or must i close down my virusscanner completely,(resident part of the virusscanner)
before scanning with TDS ?
" }-

Unplug, disable all unessary running programs/services, and perform the full TDS system scan. After the scan is completed, plugin and reboot ;)

regards.

paul