|
Posted by M.Balarama on October 4, 2008, 1:13 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I put viruses in the vault..but when you clean the vault -what happens--
thanks
Michael
|
|
Posted by Max Wachtel on October 4, 2008, 1:51 pm
If you were Registered and logged in, you could reply and use other advanced thread options
jewel:
> I put viruses in the vault..but when you clean the vault -what
> happens-- thanks
> Michael
They go to never never land
--
Virus Removal http://max.shplink.com/removal.html Keep Clean http://max.shplink.com/keepingclean.html Change nomail.afraid.org to gmail.com to reply by email.
nomail.afraid.org is for use in USENET-feel free to use it yourself.
|
|
Posted by 1PW on October 5, 2008, 4:16 am
If you were Registered and logged in, you could reply and use other advanced thread options
On 10/04/2008 10:51 AM, Max Wachtel sent:
> jewel:
>> I put viruses in the vault..but when you clean the vault -what
>> happens-- thanks
>> Michael
>
> They go to never never land
Please permit me to ask the OP's original question, but in a much more
precise manner. In using the AVG Virus Vault application, if a file is
deleted from this application's escrow, is that file deleted much like a
Windows file is deleted (and hence eminently recoverable) or is the file
permanently scrubbed/overwritten and not able to be undeleted except
with expensive scientific & heroic measures? The distinction of course
is important.
Windows files, that are simply deleted, have their filename's first
character changed to a 0xE5 and the FAT entries are deleted. Also, when
a file is moved from its original location to AVG Virus Vault's escrow
location, is the /original/ location scrubbed?
Reading the AVG Virus Vault on-line documentation, provided no
definitive answer.
Warm regards to all.
Pete
--
1PW
@?6A62?FEH9:DE=6o2@=]4@> [r4o7t]
|
|
Posted by Ant on October 5, 2008, 12:54 pm
If you were Registered and logged in, you could reply and use other advanced thread options
"1PW" wrote:
> Windows files, that are simply deleted, have their filename's first
> character changed to a 0xE5 and the FAT entries are deleted.
Yes, but most people don't use FAT these days. NTFS is a completely
different animal.
> Also, when
> a file is moved from its original location to AVG Virus Vault's escrow
> location, is the /original/ location scrubbed?
I doubt it but why is this important? I know of no malware that tries
to undelete files and if it did would be very unlikely to succeed.
|
|
Posted by 1PW on October 5, 2008, 5:09 pm
If you were Registered and logged in, you could reply and use other advanced thread options
On 10/05/2008 09:54 AM, Ant sent:
> "1PW" wrote:
>
>> Windows files, that are simply deleted, have their filename's first
>> character changed to a 0xE5 and the FAT entries are deleted.
>
> Yes, but most people don't use FAT these days. NTFS is a completely
> different animal.
>
I stand corrected. Not enough beer when I wrote that. :-(
>> Also, when
>> a file is moved from its original location to AVG Virus Vault's escrow
>> location, is the /original/ location scrubbed?
>
> I doubt it but why is this important? I know of no malware that tries
> to undelete files and if it did would be very unlikely to succeed.
Hi Phil:
I agree - I don't know of any either. The scenarios are admittedly
quite obscure, but a person might try to undelete a deleted infected
file from Virus Vault's escrow, for whatever reason, and copy the now
undeleted infected file to its previous location and now they're
possibly re-infected.
There is no accounting for the actions of some when they are desperate,
inexperienced and ill advised.
Pete
--
1PW
@?6A62?FEH9:DE=6o2@=]4@> [r4o7t]
|
| Similar Threads | Posted | | virus vault | May 29, 2008, 12:48 pm |
| where is AVG virus vault | November 14, 2008, 2:06 pm |
| Virus Vault Question | January 15, 2007, 2:26 pm |
| Re: [AVG] Question about Virus vault and healing | January 16, 2008, 6:47 pm |
| New virus (price.cpl - Bagle varient) and current Virus-Total results | September 12, 2005, 10:47 pm |
| Weird problem on Flash Drive seems like a virus but no virus detected | August 28, 2007, 12:04 pm |
| Why the PC Virus cannot attack my XP? I am the administrator, I run ActiveX, No Firewall, No Virus Scanner..... | January 14, 2008, 4:45 pm |
| List of the Virus makers's IP, there is one Virus maker in Bend Oregon with multiple IPs, scanning people computers for information. | December 28, 2007, 6:36 am |
| KAV message "riskware not-a-virus:PSWTool.Win32.RAS.a", not a virus ? | September 28, 2005, 10:52 am |
| How to create a simulated virus with a virus signature | June 14, 2005, 1:14 am |
|