Eicar Quarantined in Nod32 V2

Discussion in 'NOD32 Early v2 Beta' started by Blackspear, Dec 28, 2002.

Thread Status:
Not open for further replies.
  1. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    I can not get Eicar out of my system, 1 file has been quarantined, I delete it out of quarantine and it reappears. System restore keeps restoring it...

    Question: Do I have to track down this file in Windows and delete it o_O

    I thought deleting it via quarantine would delete the file itself, it appears not, unless system restore is the culprut...

    Cheers.
     

    Attached Files:

  2. JacK

    JacK Registered Member

    Joined:
    Jun 20, 2002
    Posts:
    737
    Location:
    Belgium -Li?ge
    Hello,

    As you see, it's in the restore files. There are protected files.

    Possible ways :

    - Make a new restore point and then perform a clean disk
    other options select suppress all restore points but last.

    - Disable the restore service, reboot and then enable restore service and makie a restore point.

    - Take full rights on System Volume Information and run a scan on this folder or select manually the file and delete it.
    Then restrict the rights back.

    Rgds,
     
  3. controler

    controler Guest

    be carful with system restore.
    Why?
    if you creat say a restore point manualy older than 5 days. Like say when you format your HD, then you will lose that restore point when you disable System restore and reboot. ;)

    Evey file you ever downloaded to your little old desktop is stored in that system folder, NOT just system files.
    Hope this helps
     
  4. I use WinXP Home and I don't have this problem with eicar..

    I uninstalled the beta, and then I downloaded and executed eicar...

    Then I reinstalled the beta.. Nod32 found both the eicar and the copy in the restore directory.. I then stopped the scan and ran the scan again using clean.. For some reason I can't right click on a file to clean or delete the virus..

    But, that took care of it...Eicar is gone...

    Just to let you know..
     
  5. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Fixed, unticked "Quarantine" in Amon and ticked "Prohibit access and display warning panel with action selection".

    The next time this sucker popped up, I deleted it :D

    Thanks for your help.

    Cheers.
     

    Attached Files:

    • Amon.JPG
      Amon.JPG
      File size:
      22.8 KB
      Views:
      488
Thread Status:
Not open for further replies.