How NOD32 remove un-deletable file ?

Discussion in 'NOD32 version 2 Forum' started by MarYo, Jul 19, 2005.

Thread Status:
Not open for further replies.
  1. MarYo

    MarYo Registered Member

    Joined:
    Oct 30, 2004
    Posts:
    12
    Today I've seen in a friends of mine Pc his Avast antivirus detecting and deleting a un-deletable active in memory trojan. The antivirus has performed a system reboot and then made a sort of command line scan, before the op.sys was fully loaded, to find and delete the infected file.

    I wonder if NOD32 do the same thing in case of un-deletable infected file.

    "Unfortunately" :) in two years of NOD32 use in my Pc I had never experienced a similar situation...

    Thanks,

    Mario
     
  2. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    NOD32 removes un-deletable files during re-boot...
     
  3. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    ...by storing the file name in the PendingFileRenameOperations entry in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager subkey of the Windows Registry.
     
  4. MarYo

    MarYo Registered Member

    Joined:
    Oct 30, 2004
    Posts:
    12
    Thanks for the explanation, really appreciated.

    Mario
     
  5. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,350
    Location:
    The Netherlands
    You're welcome - glad to help. :)
     
Thread Status:
Not open for further replies.