Boot time scan with NOD?

Hi,

I just gave up on Avast, since it failed to detect some crap on my computer. I have not installed the trial version of NOD32, and i appreciate its light resource usage.

However, one of the surprises that Avast left me was this:
"C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5aa0b436-3e745a10.zip »ZIP »javainstaller/InstallerApplet.class - Java/TrojanDownloader.OpenStream.W trojan"

When NOD32 finds this, it says it can be deleted, but only gives me the option of "Leave". It also has problems accessing some system files since they are in use. I have tried looking for a boot time scan option that could run before windows starts, as was present in Avast, but i havent been able to find one.

Is it possible to schedule such a boot time scan, and if not, what should one do about files that NOD32 cant delete/clean?

Thanks for helping out.

 

Delete your java cache.

 

WARNING! Please be careful when deleting files. Make sure that you are deleting files only inside the Java cache folder, otherwise you may damage your system!

 

Precise instructions here.

Cheers

 

Okay, i think i got that fixed. Thanks for the help. But i am still curious as to what one does if NOD32 detects a virus in a file that cannot be deleted because it might be in use or something similar. Previously all i have been able to do is to do a boot time scan to fix it.

 

Try a scan in safe mode - Most locked files can be scanned that way, not all of them, but most.

 

Just to be clear, the problem with the original file in the Java cache was that the infected file was located inside a .zip file (a .jar file is basically a .zip file... it stands for "Java archive"). NOD32 does not delete files from inside .zip files, nor does it delete the .zip file itself. It leaves this up to you, since there may be other useful info inside the .zip file.

The boot time scan is another issue, but well worth asking about.

 

Oh... Well if you want to delete the archive automatically there's really nothing to it.

In the on-demand action page > Select archives > Select delete > Tick 'copy to...' if it should contain any important data that you wish to save.

Although I'm not sure if it works with the Java cache since I don't use that stuff.

 

Does there exist any free boot CD's that can bootup and scan Windows installations on NTFS partitions, and thus be used to completement NOD32, preferably some that can actually update(to memory) over the network each time you scan so you dont have to reburn all the time?

Or are there any good freeware scan-on-demand AV programs supporting boot time scans that can be used without causing to many problems with NOD32?

 

Thanks for the tip. I prefer to delete as all important stuff is safely tucked away, everything work related is in CVS, and my web banking stuff is only installed in linux

 

The subject has come up before. Since I am not really in on those discussions, the best I can say is to search the forum for other threads.

 

BartPE is the answer - http://www.nu2.nu/pebuilder/

 

Good idea. I have actually used that before, but didnt realize that there existed AV plugins for it. Thanks again, seems like a perfect solution for me since im already slightly familiar with BartPE.

 

I have a bartpe plugin for nod if you are interested in it.

email me: richard dot burt at mac dot com and i will send it to you.

R