Locked files

Discussion in 'NOD32 version 2 Forum' started by edwardk, Sep 5, 2006.

Thread Status:
Not open for further replies.
  1. edwardk

    edwardk Registered Member

    Joined:
    Aug 1, 2006
    Posts:
    36
    Hello all

    I have been a PC-Cillin user for many years and am now testing NOD32 because of its purported detection rate and small footprint. I just ran a complete scan of my machine and it identified some suspicious files that were locked (all I could do was choose "LEAVE").

    What am I suppose to do? Why does NOD not have an open file manager? Did I misconfigure something?

    Cheers
     
  2. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Hi there I would suggest a run through this thread that will tweak and automate things for you.

    After this run a scan by following these steps:

    1. Click on the NOD32 Control Centre (Green and White split square on the bottom right hand corner of your computers screen).
    2. Click on NOD32.
    3. Click on Run NOD32.
    4. Click on “Scan and Clean”.

    Let us know how you go...

    Cheers :D
     
  3. edwardk

    edwardk Registered Member

    Joined:
    Aug 1, 2006
    Posts:
    36
    Did configured it with your settings and there were 4 files it said were locked or used by another program that could be infected.

    What do I do?
     
  4. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    Please post a log or a screenshot so we can see exactly what these files are.

    Cheers :D
     
  5. edwardk

    edwardk Registered Member

    Joined:
    Aug 1, 2006
    Posts:
    36
    D:\RecoveryBin\Volume-27ee1804-9380-4b3a-af23-0f5390f82c8d\New Folder\$OEM$\$1\***Blanked ***.rar »RAR »*** Blanked ***.exe - Win32/Adware.Craagle application

    Number of scanned files: 657206
    Number of threats found: 3
    Number of active threats: 3
    Time of completion: 12:13:56 Total scanning time: 41447 sec (11:30:47)

    Notes:
    [4] File cannot be opened. It may be in use by another application or operating system.
    [7] File is probably infected with an unknown virus.
     
  6. sir_carew

    sir_carew Registered Member

    Joined:
    Sep 2, 2003
    Posts:
    884
    Location:
    Santiago, Chile
    The file NOD32 detected in question isn't locked. This happend because the infection is inside a compressed file (ZIP or RAR for example). You need to manually remove the infected file.
    Anyway in order to infect a PC, a malware need to be extracted or executed first. And in this case, AMON will prevent your PC to be infected :)
    Locked files are displayed in blue.

     
  7. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    ^ Or let NOD remove the infected archive automatically.
    Just remember to make it quarantine the arcive first. It's always a pain if some important archive(s) are removed when you don't have a backup :)
     
  8. Blackspear

    Blackspear Global Moderator

    Joined:
    Dec 2, 2002
    Posts:
    15,115
    Location:
    Gold Coast, Queensland, Australia
    What program are you using that has a backup (D:\RecoveryBin...) ?

    I have been advised that the program is likely to be http://www.executive.com/undelete/undelete.asp and as such you have an infected file stuck in the "RecoveryBin" that needs to be deleted.

    Cheers :D
     
Thread Status:
Not open for further replies.