Locked files

Hello all

I have been a PC-Cillin user for many years and am now testing NOD32 because of its purported detection rate and small footprint. I just ran a complete scan of my machine and it identified some suspicious files that were locked (all I could do was choose "LEAVE").

What am I suppose to do? Why does NOD not have an open file manager? Did I misconfigure something?

Cheers

 

Hi there I would suggest a run through this thread that will tweak and automate things for you.

After this run a scan by following these steps:

1. Click on the NOD32 Control Centre (Green and White split square on the bottom right hand corner of your computers screen).
2. Click on NOD32.
3. Click on Run NOD32.
4. Click on “Scan and Clean”.

Let us know how you go...

Cheers

 

Did configured it with your settings and there were 4 files it said were locked or used by another program that could be infected.

What do I do?

 

Please post a log or a screenshot so we can see exactly what these files are.

Cheers

 

D:\RecoveryBin\Volume-27ee1804-9380-4b3a-af23-0f5390f82c8d\New Folder\$OEM$\$1\***Blanked ***.rar »RAR »*** Blanked ***.exe - Win32/Adware.Craagle application

Number of scanned files: 657206
Number of threats found: 3
Number of active threats: 3
Time of completion: 12:13:56 Total scanning time: 41447 sec (11:30:47)

Notes:
[4] File cannot be opened. It may be in use by another application or operating system.
[7] File is probably infected with an unknown virus.

 

The file NOD32 detected in question isn't locked. This happend because the infection is inside a compressed file (ZIP or RAR for example). You need to manually remove the infected file.
Anyway in order to infect a PC, a malware need to be extracted or executed first. And in this case, AMON will prevent your PC to be infected
Locked files are displayed in blue.

 

^ Or let NOD remove the infected archive automatically.
Just remember to make it quarantine the arcive first. It's always a pain if some important archive(s) are removed when you don't have a backup

 

What program are you using that has a backup (D:\RecoveryBin...) ?

I have been advised that the program is likely to be http://www.executive.com/undelete/undelete.asp and as such you have an infected file stuck in the "RecoveryBin" that needs to be deleted.

Cheers