Quarantine items - NOD32 2.7

Discussion in 'NOD32 version 2 Forum' started by Sunshine803, Dec 29, 2007.

Thread Status:
Not open for further replies.
  1. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    I noticed that on 2 occasions, when NOD caught a malware (Red screen), it says that it is safe to close the NOD red window because the malware was taken to the quarantine. But, when I check the quarantine window there is nothing there.

    Is there a setting that instructs NOD to delete it from the quarantine? If yes, where can I find it? I would like to check what it was and then instruct NOD to delete it or ignore it.

    Any advice?
    Happy New Year to all forum friends and the ESET team :D
     
  2. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    Is there somebody to throw some light on this please?
    Why can't I see the quarantine items in the quarantine? Are they being deleted although the message is "Moved to Quarantine?"
    Thanks
     
  3. NOD32 user

    NOD32 user Registered Member

    Joined:
    Jan 23, 2005
    Posts:
    1,766
    Location:
    Australia
    Hi Sunshine803,

    Could you post a screenshot, or give the title of the NOD32 Alert Window please?
    Depending on which module the alert was triggered and on what type of file it is possibly normal behaviour.

    Or just check in the Threat Log and right-click on the entry and paste it into a reply post here may be enough to tell...

    Cheers :)
     
  4. Get

    Get Guest

    Look if you have the "C:\Program Files\ESET\infected"-folder.
     
  5. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    I checked. There is no such folder under Program Files\ESET
    Should there be one? Do I have to create it?
    BTW, it was a normal installation of NOD32 AV 2.7.39 (downloaded from ESET)
    Thanks for your time.
     
  6. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    I'll have to wait till it happens again...
    Or maybe I'll use EICAR to test it and let you know.
    Thanks and best regards
     
  7. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    Tested it with EICAR.txt
    AMON warning comes up saying it is safe to close the window because infected file was moved to quarantine.

    This is the entry in the Threat Log:

    Time Module Object Name Threat Action User Information
    03/01/2008 13:10:00 AMON file D:\TMP\DOWNLS\EICAR.txt Eicar test file quarantined - deleted AK\Andreas Event occurred on a file modified by the application: C:\Program Files\NoteTab Light\NoteTab.exe. The file was moved to quarantine. You may close this window.
     
  8. Sunshine803

    Sunshine803 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    38
    I created a folder named infected and tested it with eicar zipped version.
    Still same result, nothing appears in Quarantine.
    Any further thoughts?
    Thanks
     
  9. Get

    Get Guest

Thread Status:
Not open for further replies.