Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: colinlam on March 06, 2007, 08:50:43 PM

Title: Win32:VB-BAA [Trj]
Post by: colinlam on March 06, 2007, 08:50:43 PM

Hi, I am running a dual boot system with Vista Ultimate and XP Pro. When I run a virus scan while using Vista it finds a virus,  Win32:VB-BAA [Trj], in the pagefile of the XP system. I have tried to Google this virus but can find no information and no other virus or spyware checker, that I have used finds this problem.

When the virus is found I have tried to repair it but get an error so I am left with either ignoring it or deleting it. When I have tried deleting, it is recreated the next time I boot XP.

Anybody got any suggestions.

Thanks. :'(

Title: Re: Win32:VB-BAA [Trj]
Post by: Spiritsongs on March 06, 2007, 10:08:18 PM

 :)  Hi :

      IF you have anything, it is a "trojan" ( "[Trj]" ), not a "virus"; they are
      best handled by antiSPYWARE/antiTROJAN program(s) . Have you used 
      any of these types of programs as a "2nd Opinion" ? If not, I recommend
      AVG Antispyware ( www.ewido.net ) and/or the FREE version of
      "SUPERantispyware" ( www.superantispyware.com ) .

Title: Re: Win32:VB-BAA [Trj]
Post by: FreewheelinFrank on March 06, 2007, 10:21:27 PM

This may well be a false positive, similar to here:

http://forum.avast.com/index.php?topic=24093.0 (http://forum.avast.com/index.php?topic=24093.0)

Quote

When the virus is found I have tried to repair it but get an error so I am left with either ignoring it or deleting it. When I have tried deleting, it is recreated the next time I boot XP.

All normal:

Quote

The page file is a special file used by windows for holding temporary data which is swapped in and out of physical memory in order to provide a larger virtual memory set.

The file name is pagefile.sys and it is created during setup in the Root of the boot drive as a hidden file. It will not show up on an Explorer file listing unless you toggle off the "Hide system Files" option. In its default state it should be approximately 1.5 times the system RAM.

http://www.techadvice.com/win2000/p/page-file_w2k.htm (http://www.techadvice.com/win2000/p/page-file_w2k.htm)

avast! seems to have a habit of finding false positives either in the pagefile or the hibernation file. Don't know why.

Title: Re: Win32:VB-BAA [Trj]
Post by: colinlam on March 06, 2007, 10:39:32 PM

Hi, thanks for your comments. I've set the scanner to exclude it.

Thanks again.