RE: Gadi Busted In Massive Conspiracy

["Gary Funck" <gary () intrepid com>]

> -----Original Message-----
> From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org]On
> Behalf Of Randy Abrams
> Sent: Thursday, February 02, 2006 8:38 PM
>
> I think that the infection rate of this worm is not high enough 
> to skew call
> volumes.

A couple of questions re: recovery, best practice:

Can the files deleted by the virus be recovered via a prgram like
Norton's Protected Bin (on the assumption that they're running Norton
but the virus subscriptions expired long ago, like most users whom
I know)?

Should the user be advised to shut down the computer immediately, so
that a file "undelete" recovery program can be run, giving it the
best chance of success?

Any publicly traded software companies that sell file recovery software?
I'm guessing their profits might up this quarter. <g>


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.