Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Yachiru on September 26, 2009, 05:31:23 PM

Title: Pagefile.sys
Post by: Yachiru on September 26, 2009, 05:31:23 PM

I have a windows 7 and windows vista on 1 laptop, my windows 7 has avira while windows vista has avast. I scanned both partition using avast from my windows vista and found a virus "pagefile.sys" which is from my windows 7 OS partition. Am I going to delete it or not?

Title: Re: Pagefile.sys
Post by: mevcit on September 26, 2009, 05:41:25 PM

We were discussing the same issue here: http://www.wilderssecurity.com/showthread.php?t=251618

Maybe this helps.

Title: Re: Pagefile.sys
Post by: Lisandro on September 26, 2009, 05:45:07 PM

Something in the memory of Windows 7 was infected, saved to the disk (memory page file) and detected by avast.
It could be a false positive or a missdetection of Avira.
Anyway, the problem is not pagefile.sys (as it is temporary), but the file(s) loaded into computer memory that could be infected.

My opinion?
False positive of avast. Do nothing.

Title: Re: Pagefile.sys
Post by: mevcit on September 26, 2009, 05:56:18 PM

But generally the situation is always the same (generally-always, get whatever you want lol). When you scan your Windows partition from another partition (doesn't matter if Windows or a Linux distro is installed there), avast! detects something in pagefile.sys. So I also say that's false positive. And this isn't a new case.

If you want, you can delete the file, it'll be recreated on next boot, and will be detected again when you do scan with avast! from another partition. ::)

Title: Re: Pagefile.sys
Post by: Yachiru on September 26, 2009, 05:57:28 PM

If I am going to delete the pagefile.sys, is it possible for windows to create a new one? ???

Title: Re: Pagefile.sys
Post by: mevcit on September 26, 2009, 06:05:38 PM

Quote from: Yachiru on September 26, 2009, 05:57:28 PM

If I am going to delete the pagefile.sys, is it possible for windows to create a new one? ???

See my one previous post.

Title: Re: Pagefile.sys
Post by: Lisandro on September 26, 2009, 08:15:26 PM

Quote from: Yachiru on September 26, 2009, 05:57:28 PM

If I am going to delete the pagefile.sys, is it possible for windows to create a new one? ???

Take care. Sometimes Windows can't boot if there isn't a pagefile before...

Title: Re: Pagefile.sys
Post by: DavidR on September 26, 2009, 09:39:53 PM

If it isn't present it should recreate it.

Title: Re: Pagefile.sys
Post by: Lisandro on September 26, 2009, 09:50:40 PM

Quote from: DavidR on September 26, 2009, 09:39:53 PM

If it isn't present it should recreate it.

I have troubles in the past and couldn't boot a system without pagefile.sys.
I'm not that sure if it really works in all conditions.

Title: Re: Pagefile.sys
Post by: 500dan500 on September 26, 2009, 11:38:21 PM

I have the same thing, when I tried BART it always said the pagefile.sys was infected, same with scanning within 7 I think it must be a FP with all the data in the pagefile.sys