[ILUG] <OT> Virii in /pagefile.sys?
kenn at bluetree.ie
Sun Apr 30 14:17:35 IST 2006
> I don't see how it can be re-infected. When you reboot nothing will
> be read from the pagefile until _after_ it's been written. If there
> is a virus signature in there, that bit of the file won't be read
> until it has been overwritten by real data that was paged out
> during the running of the system.
BTW, just to clarify: this isn't true of you hibernate and resume,
since the contents of the pagefile could be read after resume
before being overwritten. It only applies for a full boot, not
But I imagine it's unlikely you'll be resuming in this situation.
More information about the ILUG