[ILUG] <OT> Virii in /pagefile.sys?

[Kenn Humborg]

> I don't see how it can be re-infected.  When you reboot nothing will
> be read from the pagefile until _after_ it's been written.  If there
> is a virus signature in there, that bit of the file won't be read
> until it has been overwritten by real data that was paged out
> during the running of the system.

BTW, just to clarify: this isn't true of you hibernate and resume,
since the contents of the pagefile could be read after resume
before being overwritten.  It only applies for a full boot, not
a resume.

But I imagine it's unlikely you'll be resuming in this situation.

Later,
Kenn