Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rob24 on February 20, 2011, 02:58:18 PM

Title: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: rob24 on February 20, 2011, 02:58:18 PM

Hi,

A boot time scan found Win32:Zlob-32 [Tri] with a threat severity as High, in C:\hiberfil.sys. It appears in the Scan results log along with the other threat that was found and chested successfully. I tried first to repair with was unsuccessful and then to Chest which was also unsuccessful, with a message to say the disc was full.

I can't see C:\hiberfil.sys in the Windows explorer nor in a Command Prompt window.

I understand this file is something to do with the Hibernation feature, which I do use, so I don't want to lose that facility.

Oh I should add that a full system scan afterwards produced no threats.

Any advice please??

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: Asyn on February 20, 2011, 03:02:30 PM

Run a boot time scan with avast.
asyn

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: YoKenny on February 20, 2011, 03:08:53 PM

Did you modify any of avast! default scan Settings ???

You have to enable Windows to see hidden files and and folders:
http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: rob24 on February 20, 2011, 03:29:23 PM

Quote from: Asyn on February 20, 2011, 03:02:30 PM

Run a boot time scan with avast.
asyn

It was with a boot time scan that I found it this morning

Quote from: YoKenny on February 20, 2011, 03:08:53 PM

Did you modify any of avast! default scan Settings ???

You have to enable Windows to see hidden files and and folders:
http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

No, I didn't modify any default scan settings, well none that I've changed since installing Avast free 5.1.

I did that so I can now see the file in Windows Explorer. I scanned hiberfil.sys with the right click menu and no threats were found. Does that mean I can be sure I'm OK or should I check some other way?

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: YoKenny on February 20, 2011, 04:16:54 PM

You should be OK.

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: Asyn on February 20, 2011, 04:19:04 PM

Quote from: rob24 on February 20, 2011, 03:29:23 PM

1. It was with a boot time scan that I found it this morning
2. Does that mean I can be sure I'm OK or should I check some other way?

1. Sorry, I missed that.
2. If you fear an infection you can run free Mbam. (http://www.malwarebytes.org/mbam.php)
- update it before scanning..!!!
asyn

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: rob24 on February 20, 2011, 04:25:17 PM

Quote from: Asyn on February 20, 2011, 04:19:04 PM

Quote from: rob24 on February 20, 2011, 03:29:23 PM

1. It was with a boot time scan that I found it this morning
2. Does that mean I can be sure I'm OK or should I check some other way?

1. Sorry, I missed that.
2. If you fear an infection you can run free Mbam. (http://www.malwarebytes.org/mbam.php)
- update it before scanning..!!!
asyn

OK thanks yes I'll do that once the very slow BitDefender online scanner starts actually scanning!

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: Asyn on February 20, 2011, 04:28:17 PM

Quote from: rob24 on February 20, 2011, 04:25:17 PM

OK thanks yes I'll do that once the very slow BitDefender online scanner starts actually scanning!

You're welcome..!
Btw, forget the BD scan. ;)
asyn

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: rob24 on February 20, 2011, 06:35:54 PM

Quote from: Asyn on February 20, 2011, 04:28:17 PM

Quote from: rob24 on February 20, 2011, 04:25:17 PM

OK thanks yes I'll do that once the very slow BitDefender online scanner starts actually scanning!

You're welcome..!
Btw, forget the BD scan. ;)
asyn

Yup I cancelled the BitDefender - seemed to be doing nothing. Malwarebytes clean but then I never finds anything. Ah well.

Title: Re: Win32:Zlob-32 [Tri] in C:\hiberfil.sys
Post by: Asyn on February 20, 2011, 06:53:06 PM

Quote from: rob24 on February 20, 2011, 06:35:54 PM

Malwarebytes clean but then I never finds anything. Ah well.

Clean is good..! ;)
asyn