How
to know the source of suspect files? Your antivirus discovered
a suspect file, how to find, using HD Observer, which installation
of program brought this virus, or from which Internet website
a virus comes...
Your
antivirus discovered that the file "xxx.exe" is a virus or a spyware :
Note
the exact name of the file and its extension, for example, "xxx.exe"
Open
HD Observer and choose the panel "Options"
Select
the tab "Search files"
Select
in which kind of image HD Observer must search
Enter
the file name to search
Click
on "Search" button, once the file found, you can consult information about it :
file
path
name
of the image which contains the file
date
of the image
date
of the file
kind
of the image
By making a right-click on the concerned file, you can launch the following
actions :
Prohibition
of the file on the computer
Directory
to be ignored
Remove
from the list
Propreties
You can then charge the data in the panel corresponding to the image, containing
the file. Once the image charged, you will have access to following information :
file
path
exists
(if the file exists always on the disk)
definition
(if it is a file or a directory)
CreationTime
Internet
website (Internet website from which the file comes, if Internet monitoring)
event
(if it is a monitoring with the HD Observer method)
