virus vault

On 10/04/2008 10:51 AM, Max Wachtel sent:
> In news:9sNFk.2378$D32.1395@flpi146.ffdc.sbc.com,
> M.Balarama <mbalar.RemoveThis@sbcglobal.net> after much thought, came up with this
> jewel:
>> I put viruses in the vault..but when you clean the vault -what
>> happens-- thanks
>> Michael
>
> They go to never never land

Please permit me to ask the OP's original question, but in a much more
precise manner. In using the AVG Virus Vault application, if a file is
deleted from this application's escrow, is that file deleted much like a
Windows file is deleted (and hence eminently recoverable) or is the file
permanently scrubbed/overwritten and not able to be undeleted except
with expensive scientific & heroic measures? The distinction of course
is important.

Windows files, that are simply deleted, have their filename's first
character changed to a 0xE5 and the FAT entries are deleted. Also, when
a file is moved from its original location to AVG Virus Vault's escrow
location, is the /original/ location scrubbed?

Reading the AVG Virus Vault on-line documentation, provided no
definitive answer.

Warm regards to all.

Pete

--
1PW

@?6A62?FEH9:DE=6o2@=]4@> [r4o7t]

In news:MdKdndrkapVz6nXVnZ2dnUVZ_sqdnZ2d@comcast.com,
1PW <barcrnahgjuvfgyr.TakeThisOut@nby.pbz> after much thought, came up with this jewel:
> On 10/04/2008 10:51 AM, Max Wachtel sent:
>> In news:9sNFk.2378$D32.1395@flpi146.ffdc.sbc.com,
>> M.Balarama <mbalar.TakeThisOut@sbcglobal.net> after much thought, came up with
>> this jewel:
>>> I put viruses in the vault..but when you clean the vault -what
>>> happens-- thanks
>>> Michael
>>
>> They go to never never land
>
> Please permit me to ask the OP's original question, but in a much more
> precise manner. In using the AVG Virus Vault application, if a file
> is deleted from this application's escrow, is that file deleted much
> like a Windows file is deleted (and hence eminently recoverable) or
> is the file permanently scrubbed/overwritten and not able to be
> undeleted except with expensive scientific & heroic measures? The
> distinction of course is important.
>
> Windows files, that are simply deleted, have their filename's first
> character changed to a 0xE5 and the FAT entries are deleted. Also,
> when a file is moved from its original location to AVG Virus Vault's
> escrow location, is the /original/ location scrubbed?
>
> Reading the AVG Virus Vault on-line documentation, provided no
> definitive answer.
>
> Warm regards to all.
>
> Pete

I believe that it is a regular windows type delete and not "scrubbed".
--
Virus Removal http://max.shplink.com/removal.html
Keep Clean http://max.shplink.com/keepingclean.html
Change nomail.afraid.org to gmail.com to reply by email.
nomail.afraid.org is for use in USENET-feel free to use it yourself.

"1PW" wrote:

> Windows files, that are simply deleted, have their filename's first
> character changed to a 0xE5 and the FAT entries are deleted.

Yes, but most people don't use FAT these days. NTFS is a completely
different animal.

> Also, when
> a file is moved from its original location to AVG Virus Vault's escrow
> location, is the /original/ location scrubbed?

I doubt it but why is this important? I know of no malware that tries
to undelete files and if it did would be very unlikely to succeed.

On 10/05/2008 09:54 AM, Ant sent:
> "1PW" wrote:
>
>> Windows files, that are simply deleted, have their filename's first
>> character changed to a 0xE5 and the FAT entries are deleted.
>
> Yes, but most people don't use FAT these days. NTFS is a completely
> different animal.
>

I stand corrected. Not enough beer when I wrote that.

>> Also, when
>> a file is moved from its original location to AVG Virus Vault's escrow
>> location, is the /original/ location scrubbed?
>
> I doubt it but why is this important? I know of no malware that tries
> to undelete files and if it did would be very unlikely to succeed.

Hi Phil:

I agree - I don't know of any either. The scenarios are admittedly
quite obscure, but a person might try to undelete a deleted infected
file from Virus Vault's escrow, for whatever reason, and copy the now
undeleted infected file to its previous location and now they're
possibly re-infected.

There is no accounting for the actions of some when they are desperate,
inexperienced and ill advised.

Pete

--
1PW

@?6A62?FEH9:DE=6o2@=]4@> [r4o7t]