AVG v8

Cloudy,
Usually, it is stored in the temp dir of the user profile. I have run into the same issue though. I had a case where we needed to look at the log information for a few programs, AV being one of the and had to restore the image (e01) to a drive then created a VM of it to be able to look at it. I was able to view the event logs that way. I have looked through their files and do not see where the logs are stored.

cloudy
Did you look in this Directory $AVG8.VAULT$, it is a separate directory that sits outside of C\Program Files\AVG and located under C\

Hi..
According to me, AVG Antivirus is the best because it detects mostly all the Virus and delete that virus.
AVG AntiVirus is really a nice antivirus i using it from last 2 years and because of that my PC run speedily….

Thanks for the feedback.

Tried creating a virtual machine, however no luck as the vista installation has errors and wont boot.

I have found the AVG Vault file and it contains 5 *.fil files. I take it these are viruses/malware which has been found during a scan and moved here (and renamed).

Still unable to find a log file which indicates what viruses have been found by previous scans.

Think my next step will be to restore the physical drive to one of our spare HDDs and run an anti virus check against it, think its worth a shot ….. Would create a VFS but i don't have that module for EnCase oops

Thanks for the feedback.

Tried creating a virtual machine, however no luck as the vista installation has errors and wont boot.

I have found the AVG Vault file and it contains 5 *.fil files. I take it these are viruses/malware which has been found during a scan and moved here (and renamed).

Still unable to find a log file which indicates what viruses have been found by previous scans.

Think my next step will be to restore the physical drive to one of our spare HDDs and run an anti virus check against it, think its worth a shot ….. Would create a VFS but i don't have that module for EnCase oops

If you think the viruses have already been quarantined I'm not sure this would help much, as I'm not sure the vault files you've found would be detected as anything.

Have you tried to do a repair install of Vista to replace the system files to try to get the VM running? I've done this in the past with XP, but not sure how to do it with Vista. Then you could at least boot and see what AVG has got to say.

It would help to know what your end game is, but lacking that…. If you've got a drive and want to know if it's got a virus, why not hook it a write blocking bridge and run a virus scan on it. Treat it as though it was, for lack of a better word, a "storage" drive and not a drive with an OS on it. AVG will tell you where the virus are and then you can proceed however you like.

End game is really to prove that IIoC were searched for by the user and not as a result of a virus/malware putting the images on the computer. Are you able to find out what viruses are in the vault, as they are renamed??

If i restore to a HDD and treat it as a "Storage Drive" if our Anti Virus finds anything i can explain what the viruses are and whether or not they are responsible for the images.

I have tried repairing the Vista VM, it loads the CD then wont let me do anything else…. These things are sent to try us i suppose lol

Are you able to find out what viruses are in the vault, as they are renamed??

From the program interface you should, I know it has in previous versions, although I never used v8 I can't imagine it would have changed that much.

Also found this - http//www.avg.com/faq.num-1443?srch=vault#faq_1443 - which you may have already seen, but it has some info there about the vault (some of which mentioned already by trewmte)

But from within encase i take it you can not???

I'll check that link out cheers