How NOD32 remove un-deletable file ?

Discussion in 'NOD32 version 2 Forum' started by MarYo, Jul 19, 2005.

Thread Status:
Not open for further replies.
  1. MarYo

    MarYo Registered Member

    Joined:
    Oct 30, 2004
    Posts:
    12
    Today I've seen in a friends of mine Pc his Avast antivirus detecting and deleting a un-deletable active in memory trojan. The antivirus has performed a system reboot and then made a sort of command line scan, before the op.sys was fully loaded, to find and delete the infected file.

    I wonder if NOD32 do the same thing in case of un-deletable infected file.

    "Unfortunately" :) in two years of NOD32 use in my Pc I had never experienced a similar situation...

    Thanks,

    Mario
     
    MarYo, Jul 19, 2005
    #1
  2. fosius

    fosius Registered Member

    Joined:
    Oct 14, 2004
    Posts:
    479
    Location:
    Partizanske, Slovakia
    NOD32 removes un-deletable files during re-boot...
     
    fosius, Jul 19, 2005
    #2
  3. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    ...by storing the file name in the PendingFileRenameOperations entry in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager subkey of the Windows Registry.
     
    TonyKlein, Jul 19, 2005
    #3
  4. MarYo

    MarYo Registered Member

    Joined:
    Oct 30, 2004
    Posts:
    12
    Thanks for the explanation, really appreciated.

    Mario
     
    MarYo, Jul 20, 2005
    #4
  5. TonyKlein

    TonyKlein Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    4,361
    Location:
    The Netherlands
    You're welcome - glad to help. :)
     
    TonyKlein, Jul 20, 2005
    #5
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...