NOD32/Eraser Issue

Discussion in 'NOD32 version 2 Forum' started by spy1, Jul 10, 2005.

Thread Status:
Not open for further replies.
  1. manzz

    manzz Registered Member

    Joined:
    Oct 6, 2005
    Posts:
    55
    Re: Jesus virus detection during Eraser run?

    Just wondering on the settings of your eraser. Most drive erasers will wipe with a number of passes (depending on settings) writing over all free drive space creating a large number of files, one of these passes is normally a random write, which would make it possible that one of these files could be seen by an AV as a possible or even known virus.
     
  2. spy1

    spy1 Registered Member

    Joined:
    Dec 29, 2002
    Posts:
    3,139
    Location:
    Clover, SC
    Re: Jesus virus detection during Eraser run?

    You know, that actually makes a weird kind of sense. I just use one pseudorandom pass:

    "Pseudorandom Data

    Cryptographically strong pseudorandom data used for overwriting is created using the ISAAC (Indirection, Shift, Accumulate, Add and Count) algorithm by Bob Jenkins. The ISAAC generator is reseeded before each task using Eraser’s own multi-source polling random number generator.

    The random data generated using ISAAC is guaranteed to have a period length of 2^40 numbers, and the average cycle is 2^8295 32-bit (4-byte) numbers. Therefore, the average amount of data provided by the generator before the sequence starts from the beginning is 4.12e2488 gigabytes (and is at least 4096 gigabytes), which is more than enough for overwriting even the largest hard drives.

    The number of overwriting passes for this method is user selectable, the maximum being ((2^16) - 1) = 65535 passes.

    For more information, see the source code.

    Because the random data is highly incompressible, this is the only method that should be used on compressed drives."

    I guess it's possible I've got a "one million monkeys playing on keyboards" creating (instead of the complete works of Shakespeare)what looks to NOD like actual infections.

    How positively poetic. Pete
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.