> Along with the usual virii, ClamWin reports that /pagefile.sys contains
> Trojan.Downloader.Krepper.Q, but I'm nervous about deleting /pagefile.sys
> from the drive.
>> Googling returns loads of pages on the subject, but most of them
> say "Don't
> delete pagefile.sys, it's swapspace." which I know. But, if the Windows
> swapspace contains a virus, and it's not removed, then the system can get
> re-infected.
I don't see how it can be re-infected. When you reboot nothing will
be read from the pagefile until _after_ it's been written. If there
is a virus signature in there, that bit of the file won't be read
until it has been overwritten by real data that was paged out
during the running of the system.
> If I delete /pagefile.sys, will XP recreate a new, blank one, or
> will this
> cause more trouble? Most everything else found I feel safe about
> deleting,
> just /pagefile.sys has me nervous.
I'm fairly sure it will re-create it. XP is able to dynamically
extend pagefile.sys as needed, so I'd imagine it would have no
trouble re-creating it at boot time if it's not there.
If you want to be safe, rename it while the disk is in the clean
machine. Then put the disk back in the original machine and
see what happens.
Later,
Kenn
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
