English | Deutsch | Dansk | Français | Español
|
WHY DOESN'T BULLGUARD REMOVE THIS VIRUS?
Most likely, the detected virus is placed inside an archive-file or
packed file.
An archive-/packed file is characterized by being 1 file
containing a bunch of other files.
The most common example is your mail-archive: Most mail-programs
use 1 file which contains
all the mails you sent and receive. Outlook, Outlook Express and
Eudora are examples of
mail-programs using an archive-file to store all emails.
Each mail-program has its own special way of keeping track of
the individual files inside the
archive-file. This is why it's very dangerous for 3rd party
companies - like BullGuard or
other anti-virus producers - to mess around inside these files:
Since we can never be 100%
sure to know the internal logic of the file there is a great
risk of messing up the
archive-file and making it unreadable to the mail-program.
This danger is very real: The world of anti-virus is full of
horror-stories telling the tale
of anti-virus products trying to remove a virus from an
archive-file and ending up
accidentally deleting the entire inbox for the user.
This is why BullGuard doesn't offer an automatic removal in
these cases. The risk of
destroying all your e-mails is simply too great.
|
How to remove a virus manually?
Sometimes, when BullGuard encounters a virus on your computer,
you will not be given the option to disinfect.
You can read why in the box to the right. This guide will show
you how to remove such a virus manually.
If you are not familiar with computers, it is recommended that you
team up with a computer-wise friend :)

Note: This guide is for BullGuard v7.0 for
Windows XP (also valid for v6.x). If you are using
Windows Vista, choose the following guide: BullGuard v7.0 for Vista.
Locate the
virus
First of all you have to locate the virus. To do so, take a
close look at what BullGuard tells you in the message box:
"Object C:\Documents and settings\Tjes Boogie\Local
settings\Application data\Outlook\Outlook.pst => [subject:
eicar] [from: Theis Sondergaard] => eicar.com is infected with
EICAR STANDARD TEST FILE"
In the above example it is clear that the virus is located in
the users Outlook - an e-mail with the subject "eicar", sent by a
person called "Theis Sondergaard" has an attachment called
"eicar.com" which is a virus.
Another example is this:
"Object C:\Documents and settings\work.zip => eicar.com is
infected with EICAR STANDARD TEST
FILE"
Here we are dealing with a file within a zip-archive - the file
"eicar.com" is a virus and it is placed within the archive-file
"work.zip".
It's now your turn to figure out if the virus your BullGuard has
found is located inside your mail-archive, a zip-archive or a third
place:
My BullGuard has detected
a virus inside a mail-archive
My BullGuard has detected
a virus inside a zip-archive or rar-archive
My BullGuard has detected
a virus, but it doesn't fit any of the above scenarios
Removing a virus
inside your email archive
Start by opening your e-mail client (Outlook, Outlook Express,
Eudora, The Bat and so on).
Locate
the mail containing the virus
Take a close look at what BullGuard told you about the infected
email and find the one fitting this description. BullGuard tells
you the emails subject, the sender and the name of the
virus-attachment.
Delete
the e-mail
Delete the infected e-mail when you locate it.
Note: If your email program has a trash can or
a folder for deleted emails then please remember to delete the
email from this one too or empty the trash-can.
Re-compress the
mail-archive
When deleting a virus from a mail-archive it is often not enough to
delete the e-mail.
Many email programs dont actually delete the emails even if you
ask them to - they just delete any reference to it. This means that
the data itself of the email is still inside your email archive,
even though you think you have deleted it.
This is why you have to re-compress your email archive.
Mail-programs have different ways of doing this. For example, in
Outlook Express you have to choose the menu "File" -> "Folders"
-> "Compact All".
Look for a function in your mail-program called "Compress",
"Compact" or the likes.
You're
done
That's it. You have succesfully removed the virus from your
computer. It's now a good idea to re-scan your harddisk with
BullGuard to make sure that your computer is clean.
|
If you did not find the solution you were looking for,
please feel free to contact our Support.
Top of page
|