On Wed, 27 Dec 2006 13:54:41 -0500, Default User <default@user1.invalid>
wrote:

>On 27 Dec 2006 09:35:11 -0800, "Nick Skrepetos" <nskrepetos@yahoo.com>
>wrote:
>
>>Does SpyErase quarantine the files to allow them to be restored should
>>it accidentally delete the wrong files?
>>
>>-Nick
>
>Of course not. It doesn't even check the file to see whether or not it's
>malicious; it simply deletes files that match the names of suspected
>malware. A very dangerous way to clean a machine IMHO, and knowing butts
>he doesn't have a clue how it works because he didn't write it.

Nick,

Here is a snippet from "spyerase" that should demonstrate the method used.

"IF EXIST "%SystemDrive%\124842.exe" echo "%SystemDrive%\124842.exe"
IF EXIST "%SystemDrive%\124842.exe" echo
"%SystemDrive%\124842.exe">>spyerase.txt
IF NOT EXIST "%SystemDrive%\124842.exe" GOTO S1
attrib -h -r -s "%SystemDrive%\124842.exe"
DEL /F /Q "%SystemDrive%\124842.exe"
IF NOT EXIST "%SystemDrive%\124842.exe" echo successfully deleted
124842.exe
IF NOT EXIST "%SystemDrive%\124842.exe" echo successfully deleted
124842.exe>>spyerase.txt
IF NOT EXIST "%SystemDrive%\124842.exe" GOTO S1
Tskill /a "%SystemDrive%\124842.exe"
DEL /F /Q "%SystemDrive%\124842.exe"
IF NOT EXIST "%SystemDrive%\124842.exe" echo successfully deleted
124842.exe
IF NOT EXIST "%SystemDrive%\124842.exe" echo successfully deleted
124842.exe>>spyerase.txt
IF NOT EXIST "%SystemDrive%\124842.exe" GOTO S1
IF EXIST "%SystemDrive%\124842.exe" echo unable to delete 124842.exe -
will delete on reboot
IF EXIST "%SystemDrive%\124842.exe" echo unable to delete 124842.exe -
will delete on reboot>>spyerase.txt
echo DEL /F /Q "%SystemDrive%\124842.exe">>%SystemDrive%\delrb.tx t"

This is repeated over and over with a differnet file name inserted for each
test.