Why aren't viruses developed as "locked" files?

Discussion in 'NOD32 version 2 Forum' started by Lollan, Feb 3, 2006.

Thread Status:
Not open for further replies.
  1. Lollan

    Lollan Registered Member

    Joined:
    Feb 2, 2006
    Posts:
    288
    Or is this possible? We've all seen the locked/quarantined files that Nod32 (and all of the other scanners as well) can't get to when running scans, wouldn't it make sense if they were developed with this in the first place to make removal even more difficult?

    It's obviously possible since quarantined files present this issue, not sure how system files are locked though.

    Probably sounds very vague, let me know if it doesn't make sense :p
     
  2. Happy Bytes

    Happy Bytes Guest

    These type of worms already exists - Sober worms with exclusive Filelocks for example. So nothing new.
     
  3. Happy Bytes

    Happy Bytes Guest

  4. Lollan

    Lollan Registered Member

    Joined:
    Feb 2, 2006
    Posts:
    288
    So, unless there's a specific fix for them, there's not much one can do? :(
     
  5. Happy Bytes

    Happy Bytes Guest

    What specific fix? You just detect these worms running in the memory, terminate them and delete the files - what is so difficult here?
     
  6. gkweb

    gkweb Expert Firewall Tester

    Joined:
    Aug 29, 2003
    Posts:
    1,932
    Location:
    FRANCE, Rouen (76)
    Simply detects the file before it runs :)

    EDIT : or use the above method said by Happy Bytes ;)
     
  7. Lollan

    Lollan Registered Member

    Joined:
    Feb 2, 2006
    Posts:
    288
    Didn't mean to upset you there, just assumed the file would lock itself in the Windows environment as well, but that's not too hard to get around anyways.

    Asking questions before my mind thinks is getting me. :(

    Thanks all. :)
     
  8. Happy Bytes

    Happy Bytes Guest

    You're propably not long enough here, but hey if i would be upset this sounds completely different :D
     
  9. Lollan

    Lollan Registered Member

    Joined:
    Feb 2, 2006
    Posts:
    288
    Yea, I just joined the other day, but have been a long time Nod32 user, I'm the guy trying to get my Boss to start selling Nod32 :p

    https://www.wilderssecurity.com/showthread.php?t=118628
     
  10. Brian N

    Brian N Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2,148
    Location:
    Denmark
    HB happy mode: :p :D :eek: :) :-* :-* :-*
    Now you know hehe
     
Thread Status:
Not open for further replies.