PDA

View Full Version : How NOD32 remove un-deletable file ?


MarYo
July 19th, 2005, 02:01 PM
Today I've seen in a friends of mine Pc his Avast antivirus detecting and deleting a un-deletable active in memory trojan. The antivirus has performed a system reboot and then made a sort of command line scan, before the op.sys was fully loaded, to find and delete the infected file.

I wonder if NOD32 do the same thing in case of un-deletable infected file.

"Unfortunately" :) in two years of NOD32 use in my Pc I had never experienced a similar situation...

Thanks,

Mario

fosius
July 19th, 2005, 02:25 PM
NOD32 removes un-deletable files during re-boot...

TonyKlein
July 19th, 2005, 02:42 PM
{QUOTE-> NOD32 removes un-deletable files during re-boot... <-QUOTE}

...by storing the file name in the PendingFileRenameOperations entry in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager subkey of the Windows Registry.

MarYo
July 20th, 2005, 12:18 AM
Thanks for the explanation, really appreciated.

Mario

TonyKlein
July 20th, 2005, 10:35 AM
You're welcome - glad to help. :)