Nod 32 Error message?

[charles whisky]

Using Nod 32 trial and all ok but after a scan of C: the following
errror message is reported.

C:\ hiberfil.sys -error opening (file locked) (4)
C:\ pagefile.sys -error opening (file locked) (4)

Notes (4) File cannot be opened it is being excusively used by another
application or operating system.

Is this important to me, if so how can I correct this?

Thanks...

 

[Tx2]

Using Nod 32 trial and all ok but after a scan of C: the following
errror message is reported.

C:\ hiberfil.sys -error opening (file locked) (4)
C:\ pagefile.sys -error opening (file locked) (4)

Notes (4) File cannot be opened it is being excusively used by another
application or operating system.

Is this important to me, if so how can I correct this?

It's nothing to worry about

http://www.wilderssecurity.com/showthread.php?t=25646
&highlight=error+opening+file+locked

 

[charles whisky]

It's nothing to worry about

http://www.wilderssecurity.com/showthread.php?t=25646
&highlight=error+opening+file+locked

Many thanks, I've now added the above link to my favs.

Regards...

 

[Tx2]

Many thanks, I've now added the above link to my favs.

http://www.wilderssecurity.com/forumdisplay.php?f=16 is really the link
you want for the entire NOD32 forum

 

[Richard S. Westmoreland]

Using Nod 32 trial and all ok but after a scan of C: the following
errror message is reported.

C:\ hiberfil.sys -error opening (file locked) (4)
C:\ pagefile.sys -error opening (file locked) (4)

Notes (4) File cannot be opened it is being excusively used by another
application or operating system.

Is this important to me, if so how can I correct this?

Thanks...

This should be typical of most antivirus scan jobs. The page file and
hibernation files aren't accessible since they are in use - this will also
be the case with System Volume Information, the SAM files, and perhaps a few
other system files. As a side note, if a virus is ever detected in System
Volume Information but can't be cleaned, you have to delete your Windows XP
Restore Points.

 

[beatnik]

This should be typical of most antivirus scan jobs. The page file and
hibernation files aren't accessible since they are in use - this will
also be the case with System Volume Information, the SAM files, and
perhaps a few other system files. As a side note, if a virus is ever
detected in System Volume Information but can't be cleaned, you have
to delete your Windows XP Restore Points.

That happened to me with Nod. It found a virus in System Volume
Information point but it couldnt delete it. why?

Avast in the other hand can clean this virus because it has boot time
scan which Nod hasn. why?

 

[Richard S. Westmoreland]

That happened to me with Nod. It found a virus in System Volume
Information point but it couldnt delete it. why?

Avast in the other hand can clean this virus because it has boot time
scan which Nod hasn. why?

If you disable your XP Restore Points, then you won't have that problem. I
think if you attempt to manually remove files in the System Volume
Information, you may corrupt it.

You answered your own question - Avast has boot time scan. However, what is
more important - cleaning up already infected files, or preventing the files
from being infected at all?

 

[Jeffrey A. Setaro]

That happened to me with Nod. It found a virus in System Volume
Information point but it couldnt delete it. why?

Avast in the other hand can clean this virus because it has boot time
scan which Nod hasn. why?

Because Windows locks the contents of the System Restore folder... In
order to remove viruses from restore points you have to disable system
restore, reboot then re-enable system restore.

Cheers-

Jeff Setaro
jasetaro@SPAM_ME_NOT_mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

 

[beatnik]

If you disable your XP Restore Points, then you won't have that
problem. I think if you attempt to manually remove files in the
System Volume Information, you may corrupt it.

You answered your own question - Avast has boot time scan. However,
what is more important - cleaning up already infected files, or
preventing the files from being infected at all?

Both. My question is why Nod32 cant delete it....
Not only System Volume Information files but other virus as well and it
only leaves me the choice of Leave. It cant even dleete them?


ps. System Volume Information files is used for Restore Points.

 

[beatnik]

Because Windows locks the contents of the System Restore folder... In
order to remove viruses from restore points you have to disable system
restore, reboot then re-enable system restore.

Cheers-

Jeff Setaro
jasetaro@SPAM_ME_NOT_mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

Why it cannot delete it?

 

[Jeffrey A. Setaro]

Why it cannot delete it?

Let me say this again... Windows locks the system restore folder and
will not allow third party applications to write to it. Nod32 can not
clean the system restore folder because Windows won't allow Nod32
write access to the file.

Cheers-

Jeff Setaro
jasetaro@SPAM_ME_NOT_mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

 

[beatnik]

Let me say this again... Windows locks the system restore folder and
will not allow third party applications to write to it. Nod32 can not
clean the system restore folder because Windows won't allow Nod32
write access to the file.

Yes but what for does it locks it against write access? What will happen
if that folder contains a virus infected file that needs to be deleted.

But yes i see, so the only way for the AV to actually delete the system
restore infected file is by running a scheduled boot time scan, which
takes place just before the windows is loading and hence the file is free
to be deleted sicne there in no permission applied to it yet.

Therefore Nod32 cannot delete the file, but Avast can.

 

[Jeffrey A. Setaro]

Yes but what for does it locks it against write access? What will happen
if that folder contains a virus infected file that needs to be deleted.

You should disable system restore and reboot... This will delete the
infected (and all your restore points).

But yes i see, so the only way for the AV to actually delete the system
restore infected file is by running a scheduled boot time scan, which
takes place just before the windows is loading and hence the file is free
to be deleted sicne there in no permission applied to it yet.

Therefore Nod32 cannot delete the file, but Avast can.

And more than likely you'll end up with corrupted restore point(s).
Cheers-

Jeff Setaro
jasetaro@SPAM_ME_NOT_mags.net
http://people.mags.net/jasetaro/
PGP Key IDs DH/DSS: 0x5D41429D RSA: 0x599D2A99 New RSA: 0xA19EBD34

 

[Tx2]

Therefore Nod32 cannot delete the file, but Avast can.

Please, feel free to use AVAST in preference to NOD32, if you must.

 

[beatnik]

You should disable system restore and reboot... This will delete the
infected (and all your restore points).


And more than likely you'll end up with corrupted restore point(s).
Cheers-

Well, is it any better if the restore points contain the virus?
Why not just disinfect it instead of deleting it?

 

[beatnik]

Please, feel free to use AVAST in preference to NOD32, if you must.

Well as i matter of fact i do but i am not so happy about it.
Nod32 is much lighter than Avast and it takes less time to scan the
system entirely(alomst 11 minutes), thats why they call it the best AV.

But in the other hand, whats so best about it when it cant delete an
infected file?

 

[Richard S. Westmoreland]

Well, is it any better if the restore points contain the virus?
Why not just disinfect it instead of deleting it?

Yes. Because then an experienced administrator would know to delete the
Restore Points to correct the problem. What if my antivirus deleted files
in the Restore Point, and now being the confident person, decide I need to
return to that Restore Point. If it is corrupted, then I may have destroyed
my operating system and now I need to reformat and reinstall. What is the
better scenario?

I am a much better fan of good realtime scanners like Sophos and Nod32, than
good manual scanners. If you have a virus, use a removal tool generously
provided by one of the leading vendors - otherwise prevent the virus from
the start.

Perhaps what ESET should do is include a utility that will prompt the user
to wipe out the entire infected restore point.

 

[Willie Nickels]

Well as i matter of fact i do but i am not so happy about it.
Nod32 is much lighter than Avast and it takes less time to scan the
system entirely(alomst 11 minutes), thats why they call it the best AV.

But in the other hand, whats so best about it when it cant delete an
infected file?

These are things you wouldn't have to concern yourself with if you did
not *need* to rely on AV to protect your sorry self from your bad
decisions.

 

[Beatnik]

(e-mail address removed) (Willie Nickels) wrote in

These are things you wouldn't have to concern yourself with if you did
not *need* to rely on AV to protect your sorry self from your bad
decisions.

Nod and Avast are bad desisions? Funny, i though one of my best choices.