deleting files

Discussion in 'NOD32 version 2 Forum' started by data, Oct 21, 2003.

Thread Status:
Not open for further replies.
  1. data

    data Registered Member

    Joined:
    Oct 21, 2003
    Posts:
    4
    I have noticed that with my current file system setup NOD32 is unable to delete viruses. I used the Eicar test file to show an example of the error I receive when I try to delete a file via NOD32.

    My HD partition type is dynamic with a simple layout using the NTFS file system.

    NOD32 Antivirus System information
    Virus signature database version:   1.538 (20031021)
    Dated:   October 21, 2003
    Virus signature database build:   3991

    Information on other scanner support parts
    Advanced heuristics module version:   1.003 (20030703)
    Advanced heuristics module build:   1031
    Archive support module version:   1.005 (20030924)
    Archive support module build version:   1061

    Information on installed components
    NOD32 For Windows NT/2000/XP - Administrative tools
    Version:   2.000.6
    NOD32 For Windows NT/2000/XP - Base
    Version:   2.000.6
    NOD32 For Windows NT/2000/XP - Internet support
    Version:   2.000.6
    NOD32 for Windows NT/2000/XP - Standard component
    Version:   2.000.6

    Operating system information
    Platform:   Windows XP
    Version:   5.1.2600 Service Pack 1
    Version of common control components:   5.82.2800
    RAM:   512 MB
    Processor:   Intel(R) Celeron(TM) CPU 1100MHz (1474 MHz)

    http://www.farlig.net/users/data/nod32s.JPG
     
  2. anotherjack

    anotherjack Registered Member

    Joined:
    Jun 13, 2003
    Posts:
    224
    Location:
    Louisiana
    I've had this problem before, but it appeared to be due to NOD/AMON attempting to delete the file more than once. For instance, if you tell it to delete the file once it's found, it will do so, then try to do it again (for some reason) o_O, generating the error.

    In your case, if you look at the first screen shot, AMON kept it from being created in the first place ("Event occurred on newly created file"), but it still tried to delete it. It wasn't there to delete, so "Error deleting file."

    Have you checked to see if the file is actually gone?
     
  3. data

    data Registered Member

    Joined:
    Oct 21, 2003
    Posts:
    4
    The file never gets deleted by NOD32, I must manually delete it through Windows Explorer. I am almost sure that this is a bug in NOD32 and dynamic partitions with Windows 2000 or XP.
     
  4. martindijk

    martindijk Registered Member

    Joined:
    Jun 13, 2003
    Posts:
    537
    Location:
    Gorredijk - the Netherlands
    Hi all,

    Another reason why NOD can't or won't clean or delete the Eicar test file is because it isn't an actual virus, it's just a string of numbers and text, so NOD doesn't see it as a real virus, worm etc.

    rgds,
    Martin
     
  5. data

    data Registered Member

    Joined:
    Oct 21, 2003
    Posts:
    4
    Ok, I am kind of sick of posting replies to comments that are getting me nowhere so the next person to post a reply, hopefully will be with the NOD32 development team or at least have the same type of HD partition that I have.

    Yes, NOD32 should delete the Eicar test file.

    I only used the Eicar test file as an example; this has happened to me with true viruses.

    And if your next question is going to be are you logged in with administrative privileges... yes I am.


    If your HD partition type is dynamic with one of the layouts from below and you are using the NTFS file system, please try the Eicar test file.

    Type: Dynamic
    Layout: Simple/Spanned/Striped/Mirrored/RAID-5
    File System: NTFS

    Example Picture:
    http://www.farlig.net/users/data/dm.JPG
     
  6. jan

    jan Former Eset Moderator

    Joined:
    Oct 25, 2002
    Posts:
    804
    Hi data,

    >My HD partition type is dynamic with a simple layout using the NTFS file system.

    Have you tried to delete the Eicar testfile:

    1. with NOD32 on-demand scanner (ODS) started from the NOD32 Control Center?

    2. ....or with NOD32 ODS from the Start menu (Start->Programs->Eset->NOD32) ?

    If you haven't tried 2. - pls. try it - it can help in this specific case.

    Thanks,

    jan
     
  7. data

    data Registered Member

    Joined:
    Oct 21, 2003
    Posts:
    4
    Hello Jan,

    Your 2nd method works, but I still think that it is quite annoying when AMON prompts you for an action and fails to delete a file.

    Any idea if the NOD32 dev team is working on fixing this bug?
     
  8. jan

    jan Former Eset Moderator

    Joined:
    Oct 25, 2002
    Posts:
    804
    Hi data,

    >Any idea if the NOD32 dev team is working on fixing this bug?

    Sorry for the inconvenience - yes this will be fixed as fast as possible.

    Thanks,

    jan
     
Thread Status:
Not open for further replies.