TDS.Unpk and NOD/KAV alert, and no TDS alert ..

Discussion in 'Trojan Defence Suite' started by averhuls, Apr 7, 2004.

Thread Status:
Not open for further replies.
  1. averhuls

    averhuls Guest

    It happened to my pc and by other forummembers.

    TDS unpacks a file via the dir:

    C:\Program Files\TDS3\xDynamic\TDS.Unpk

    and NOD32 or Kapersky alert that there is 'malware' in that dir.

    example:C:\Program Files\TDS3\xDynamic\TDS.Unpk\twaintec.dll

    What i don't understand is, that if TDS has unpacked this file to examine this, why is there no alert from TDS?
    Is it because it is already locked by the virusscanner because that
    is able to lock that file faster?

    And if you want to remove such a file, this file appears to be locked,
    (of course) and you have to manually find out, who locked it, before it can be removed.
    It happened to me a few times that both, programs couldn't remove the file,because of the file lock. (both have locked it?)

    In fact,bacause of this, i had never saw a trojan alert from TDS yet, only files that couldn't be 'unpacked'.

    What is the best way to handle this?

    (of course i understand that TDS detects trojans that others don't,
    that is why i am running it).

    Albert
     
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    We've told you before to close other scanners when using another scanner, including TDS. TDS down't need to be closed completely, only don't have it in an active scan when using other scanners.
    We've also told you what is in the Unpk folder is a copy of an original elsewhere on your system and in most cases is deleted after the scanning process or after the next scan, as well you can delete them manually. On my system they're always deleted after the scan automatically, but don't worry if that doesn't immediately happen, don't know why, just delete them.
     
  3. averhuls

    averhuls Guest

    I can't close down my virusscanner, that is not a good idea,
    it was not scanning the whole drives only resident in memory.
    When i start scanning with TDS, TDS unpacks a file in the mentioned directory and THEN the resident-part of the virusscanner comes in.
    (I was not scanning that drive.)
    BEFORE TDS alerts, that is why i asked this question.
    And the files are unpacked by TDS are only there while being unpacked by TDS

    Or must i close down my virusscanner completely,(resident part of the virusscanner)
    before scanning with TDS ?
     
  4. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Would try so it can't jump in and block the file for any further access
     
  5. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    As a matter of fact, it is ;)

    Unplug, disable all unessary running programs/services, and perform the full TDS system scan. After the scan is completed, plugin and reboot ;)

    regards.

    paul
     
Thread Status:
Not open for further replies.