Author Topic: Win32:VB-BAA [Trj]  (Read 1964 times)

0 Members and 1 Guest are viewing this topic.

Offline colinlam

  • Newbie
  • *
  • Posts: 2
Win32:VB-BAA [Trj]
« on: March 06, 2007, 08:50:43 PM »
Hi, I am running a dual boot system with Vista Ultimate and XP Pro. When I run a virus scan while using Vista it finds a virus,  Win32:VB-BAA [Trj], in the pagefile of the XP system. I have tried to Google this virus but can find no information and no other virus or spyware checker, that I have used finds this problem.

When the virus is found I have tried to repair it but get an error so I am left with either ignoring it or deleting it. When I have tried deleting, it is recreated the next time I boot XP.

Anybody got any suggestions.

Thanks. :'(

Offline Spiritsongs

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1757
  • Ad-aware orientated Support forum(s)
Re: Win32:VB-BAA [Trj]
« Reply #1 on: March 06, 2007, 10:08:18 PM »
 :)  Hi :

      IF you have anything, it is a "trojan" ( "[Trj]" ), not a "virus"; they are
      best handled by antiSPYWARE/antiTROJAN program(s) . Have you used 
      any of these types of programs as a "2nd Opinion" ? If not, I recommend
      AVG Antispyware ( www.ewido.net ) and/or the FREE version of
      "SUPERantispyware" ( www.superantispyware.com ) .
For the Best in what counts in Life :
www.tacf.org

Offline FreewheelinFrank

  • Avast Evangelist
  • Ultra Poster
  • ***
  • Posts: 4872
  • I'm a GNU
    • Don't Surf in the Nude!
Re: Win32:VB-BAA [Trj]
« Reply #2 on: March 06, 2007, 10:21:27 PM »
This may well be a false positive, similar to here:

http://forum.avast.com/index.php?topic=24093.0

Quote
When the virus is found I have tried to repair it but get an error so I am left with either ignoring it or deleting it. When I have tried deleting, it is recreated the next time I boot XP.

All normal:

Quote
The page file is a special file used by windows for holding temporary data which is swapped in and out of physical memory in order to provide a larger virtual memory set.

The file name is pagefile.sys and it is created during setup in the Root of the boot drive as a hidden file. It will not show up on an Explorer file listing unless you toggle off the "Hide system Files" option. In its default state it should be approximately 1.5 times the system RAM.

http://www.techadvice.com/win2000/p/page-file_w2k.htm

avast! seems to have a habit of finding false positives either in the pagefile or the hibernation file. Don't know why.

     Bambleweeny 57 sub-meson brain     Don't Surf in the Nude Blog

Offline colinlam

  • Newbie
  • *
  • Posts: 2
Re: Win32:VB-BAA [Trj]
« Reply #3 on: March 06, 2007, 10:39:32 PM »
Hi, thanks for your comments. I've set the scanner to exclude it.

Thanks again.