deleting files

I have noticed that with my current file system setup NOD32 is unable to delete viruses. I used the Eicar test file to show an example of the error I receive when I try to delete a file via NOD32.

My HD partition type is dynamic with a simple layout using the NTFS file system.

NOD32 Antivirus System information
Virus signature database version:   1.538 (20031021)
Dated:   October 21, 2003
Virus signature database build:   3991

Information on other scanner support parts
Advanced heuristics module version:   1.003 (20030703)
Advanced heuristics module build:   1031
Archive support module version:   1.005 (20030924)
Archive support module build version:   1061

Information on installed components
NOD32 For Windows NT/2000/XP - Administrative tools
Version:   2.000.6
NOD32 For Windows NT/2000/XP - Base
Version:   2.000.6
NOD32 For Windows NT/2000/XP - Internet support
Version:   2.000.6
NOD32 for Windows NT/2000/XP - Standard component
Version:   2.000.6

Operating system information
Platform:   Windows XP
Version:   5.1.2600 Service Pack 1
Version of common control components:   5.82.2800
RAM:   512 MB
Processor:   Intel(R) Celeron(TM) CPU 1100MHz (1474 MHz)

http://www.farlig.net/users/data/nod32s.JPG

 

I've had this problem before, but it appeared to be due to NOD/AMON attempting to delete the file more than once. For instance, if you tell it to delete the file once it's found, it will do so, then try to do it again (for some reason) , generating the error.

In your case, if you look at the first screen shot, AMON kept it from being created in the first place ("Event occurred on newly created file"), but it still tried to delete it. It wasn't there to delete, so "Error deleting file."

Have you checked to see if the file is actually gone?

 

The file never gets deleted by NOD32, I must manually delete it through Windows Explorer. I am almost sure that this is a bug in NOD32 and dynamic partitions with Windows 2000 or XP.

 

Hi all,

Another reason why NOD can't or won't clean or delete the Eicar test file is because it isn't an actual virus, it's just a string of numbers and text, so NOD doesn't see it as a real virus, worm etc.

rgds,
Martin

 

Ok, I am kind of sick of posting replies to comments that are getting me nowhere so the next person to post a reply, hopefully will be with the NOD32 development team or at least have the same type of HD partition that I have.

Yes, NOD32 should delete the Eicar test file.

I only used the Eicar test file as an example; this has happened to me with true viruses.

And if your next question is going to be are you logged in with administrative privileges... yes I am.


If your HD partition type is dynamic with one of the layouts from below and you are using the NTFS file system, please try the Eicar test file.

Type: Dynamic
Layout: Simple/Spanned/Striped/Mirrored/RAID-5
File System: NTFS

Example Picture:
http://www.farlig.net/users/data/dm.JPG

 

Hi data,

>My HD partition type is dynamic with a simple layout using the NTFS file system.

Have you tried to delete the Eicar testfile:

1. with NOD32 on-demand scanner (ODS) started from the NOD32 Control Center?

2. ....or with NOD32 ODS from the Start menu (Start->Programs->Eset->NOD32) ?

If you haven't tried 2. - pls. try it - it can help in this specific case.

Thanks,

jan

 

Hello Jan,

Your 2nd method works, but I still think that it is quite annoying when AMON prompts you for an action and fails to delete a file.

Any idea if the NOD32 dev team is working on fixing this bug?

 

Hi data,

>Any idea if the NOD32 dev team is working on fixing this bug?

Sorry for the inconvenience - yes this will be fixed as fast as possible.

Thanks,

jan