Author Topic: Accidental deletion - anything I can do?  (Read 1759 times)

0 Members and 1 Guest are viewing this topic.

Offline FHC

  • Newbie
  • *
  • Posts: 2
Accidental deletion - anything I can do?
« on: December 10, 2012, 02:53:10 PM »
Hi,

Avast caught a virus (thank you Avast). Being an idiot I then deleted it (as in I right clicked on it from the "view Scan results" page and clicked "delete") I did this because I wasn't thinking clearly and thought "belt and braces, better get it as destroyed as it possibly can be".

I've now got an IT expert who wants to study the virus and find out more about it (there's reason to suspect this wasn't a wild virus but something specifically sent to me so we are interested to do this to find out more about the sender) - so he wants to run it on a virtual machine, to observe who it connects back to (the command and control (C2) infrastructure) - and if its interesting have someone reverse engineer the code. But like an idiot I pressed delete.

I've emailed them to ask if there's any way of restoring it but in the meantime I thought I'd ask here as well - is the virus gone forever or is there a way I can bring it back?

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 84099
  • No support PMs thanks
Re: Accidental deletion - anything I can do?
« Reply #1 on: December 10, 2012, 03:42:21 PM »
The avast deletion is just that it doesn't get saved anywhere or send to the recycle bin.

But deleted files are essentially only removed from the file table (and the file space/sectors marked as free/available), so using a file recovery application may be able to recover it but the longer it is left the more chance the file will have been overwritten. Try a search for file recovery applications or undelete and see what it brings, there are many free tools out there. I would have thought an IT expert would have that in their tool kit.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline FHC

  • Newbie
  • *
  • Posts: 2
Re: Accidental deletion - anything I can do?
« Reply #2 on: December 10, 2012, 03:52:04 PM »
Thank you. Haven't used that computer since so hoping for the best.

Offline DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 84099
  • No support PMs thanks
Re: Accidental deletion - anything I can do?
« Reply #3 on: December 10, 2012, 04:48:03 PM »
You're welcome.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.9.2437 (build 20.9.5758.0) UI-1.0.579/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security