Boot time scan with NOD?

Discussion in 'NOD32 version 2 Forum' started by ziphnor, Dec 5, 2005.

Thread Status:
Not open for further replies.
  1. ziphnor

    ziphnor Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    14
    Hi,

    I just gave up on Avast, since it failed to detect some crap on my computer. I have not installed the trial version of NOD32, and i appreciate its light resource usage.

    However, one of the surprises that Avast left me was this:
    "C:\Documents and Settings\Administrator\Application Data\Sun\Java\Deployment\cache\javapi\v1.0\jar\javainstaller.jar-5aa0b436-3e745a10.zip »ZIP »javainstaller/InstallerApplet.class - Java/TrojanDownloader.OpenStream.W trojan"

    When NOD32 finds this, it says it can be deleted, but only gives me the option of "Leave". It also has problems accessing some system files since they are in use. I have tried looking for a boot time scan option that could run before windows starts, as was present in Avast, but i havent been able to find one.

    Is it possible to schedule such a boot time scan, and if not, what should one do about files that NOD32 cant delete/clean?

    Thanks for helping out.
     
  2. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Delete your java cache.
     
  3. gue_st

    gue_st Guest

    WARNING! Please be careful when deleting files. Make sure that you are deleting files only inside the Java cache folder, otherwise you may damage your system!
     
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Precise instructions here.

    Cheers :D
     
  5. ziphnor

    ziphnor Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    14
    Okay, i think i got that fixed. Thanks for the help. But i am still curious as to what one does if NOD32 detects a virus in a file that cannot be deleted because it might be in use or something similar. Previously all i have been able to do is to do a boot time scan to fix it.
     
  6. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Try a scan in safe mode - Most locked files can be scanned that way, not all of them, but most.
     
  7. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA
    Just to be clear, the problem with the original file in the Java cache was that the infected file was located inside a .zip file (a .jar file is basically a .zip file... it stands for "Java archive"). NOD32 does not delete files from inside .zip files, nor does it delete the .zip file itself. It leaves this up to you, since there may be other useful info inside the .zip file.

    The boot time scan is another issue, but well worth asking about.
     
  8. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    Oh... Well if you want to delete the archive automatically there's really nothing to it.

    In the on-demand action page > Select archives > Select delete > Tick 'copy to...' if it should contain any important data that you wish to save.

    Although I'm not sure if it works with the Java cache since I don't use that stuff.
     

    Attached Files:

  9. ziphnor

    ziphnor Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    14
    Does there exist any free boot CD's that can bootup and scan Windows installations on NTFS partitions, and thus be used to completement NOD32, preferably some that can actually update(to memory) over the network each time you scan so you dont have to reburn all the time?

    Or are there any good freeware scan-on-demand AV programs supporting boot time scans that can be used without causing to many problems with NOD32?
     
  10. ziphnor

    ziphnor Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    14
    Thanks for the tip. I prefer to delete as all important stuff is safely tucked away, everything work related is in CVS, and my web banking stuff is only installed in linux :)
     
  11. alglove

    alglove Registered Member

    Joined:
    Jan 17, 2005
    Posts:
    904
    Location:
    Houston, Texas, USA
    The subject has come up before. Since I am not really in on those discussions, the best I can say is to search the forum for other threads.
     
  12. pc-support

    pc-support Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    285
    Location:
    Edinburgh, UK
    BartPE is the answer - http://www.nu2.nu/pebuilder/
     
  13. ziphnor

    ziphnor Registered Member

    Joined:
    Mar 29, 2005
    Posts:
    14
    Good idea. I have actually used that before, but didnt realize that there existed AV plugins for it. Thanks again, seems like a perfect solution for me since im already slightly familiar with BartPE.
     
  14. pc-support

    pc-support Registered Member

    Joined:
    Mar 10, 2005
    Posts:
    285
    Location:
    Edinburgh, UK
    I have a bartpe plugin for nod if you are interested in it.

    email me: richard dot burt at mac dot com and i will send it to you.

    R
     
Thread Status:
Not open for further replies.