Author Topic: Accidental deletion - anything I can do?  (Read 1676 times)

0 Members and 1 Guest are viewing this topic.

Offline FHC

  • Newbie
  • *
  • Posts: 2
Accidental deletion - anything I can do?
« on: December 10, 2012, 02:53:10 PM »
Hi,

Avast caught a virus (thank you Avast). Being an idiot I then deleted it (as in I right clicked on it from the "view Scan results" page and clicked "delete") I did this because I wasn't thinking clearly and thought "belt and braces, better get it as destroyed as it possibly can be".

I've now got an IT expert who wants to study the virus and find out more about it (there's reason to suspect this wasn't a wild virus but something specifically sent to me so we are interested to do this to find out more about the sender) - so he wants to run it on a virtual machine, to observe who it connects back to (the command and control (C2) infrastructure) - and if its interesting have someone reverse engineer the code. But like an idiot I pressed delete.

I've emailed them to ask if there's any way of restoring it but in the meantime I thought I'd ask here as well - is the virus gone forever or is there a way I can bring it back?

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 83515
  • No support PMs thanks
Re: Accidental deletion - anything I can do?
« Reply #1 on: December 10, 2012, 03:42:21 PM »
The avast deletion is just that it doesn't get saved anywhere or send to the recycle bin.

But deleted files are essentially only removed from the file table (and the file space/sectors marked as free/available), so using a file recovery application may be able to recover it but the longer it is left the more chance the file will have been overwritten. Try a search for file recovery applications or undelete and see what it brings, there are many free tools out there. I would have thought an IT expert would have that in their tool kit.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.6.2420 (build 20.6.5495.561) UI-1.0.541/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline FHC

  • Newbie
  • *
  • Posts: 2
Re: Accidental deletion - anything I can do?
« Reply #2 on: December 10, 2012, 03:52:04 PM »
Thank you. Haven't used that computer since so hoping for the best.

Online DavidR

  • Avast √úberevangelist
  • Certainly Bot
  • *****
  • Posts: 83515
  • No support PMs thanks
Re: Accidental deletion - anything I can do?
« Reply #3 on: December 10, 2012, 04:48:03 PM »
You're welcome.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.6.2420 (build 20.6.5495.561) UI-1.0.541/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro