Author Topic: pagefile.sys infected  (Read 9561 times)

0 Members and 1 Guest are viewing this topic.

CARLIN

  • Guest
pagefile.sys infected
« on: October 08, 2009, 06:11:12 AM »
During a virus scan I receive this message: pagefile.sys infected by a trojan. "action recommended: move to chest". when I press ok, I get this: pagefile.sys cannot be processed
.

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: pagefile.sys infected
« Reply #1 on: October 08, 2009, 06:26:46 AM »
try this:

enable avast boot time scan, see : http://www.digitalred.com/avast-boot-time.php (if found anything, better to move it to chest)
and if asked to restart, do not restart until you have done this too:

this will clear the page file on shutdown of the system
Here are the steps to configure this setting:

    * Click Start
    * Click Control Panel
    * Click Administrative Tools
    * Click Local Security Policy
    * Click the "+" next to Local Policies
    * Click Security Options
    * Doubleclick "Shutdown: Clear Virtual Memory Pagefile"
    * Select the "Enabled" radio button
    * Click OK

come back and report.

nmb

CARLIN

  • Guest
Re: pagefile.sys infected
« Reply #2 on: October 08, 2009, 06:04:20 PM »
Thank you,mmb!
   I'll follow the steps you recommend and I gonna let you know the results.
   I really appreciate your help.
   Sorry for any redaction mistake: english is not my native languaje

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: pagefile.sys infected
« Reply #3 on: October 08, 2009, 06:09:31 PM »
Sorry for any redaction mistake: english is not my native languaje

not mine too.  ;)

nmb

CARLIN

  • Guest
Re: pagefile.sys infected SOLVED!
« Reply #4 on: October 08, 2009, 11:31:33 PM »
 :D
I did as you told me and no more virus!
There's no way to express my gratitude. You are very nice person and I am sure there's a lot of guys whom got your help.
   One last question:should I turn off "erase pagefile....." again?

CARLIN

  • Guest
Re: pagefile.sys infected
« Reply #5 on: October 08, 2009, 11:36:58 PM »
I mean:"Shutdown: Clear Virtual Memory Pagefile.  Should I enable this off?

Hermite15

  • Guest
Re: pagefile.sys infected
« Reply #6 on: October 08, 2009, 11:43:33 PM »
I mean:"Shutdown: Clear Virtual Memory Pagefile.  Should I enable this off?


no, if you solved your issue you can turn that off, otherwise, depending on your page file size, this will unnecessarily slow down your reboot/shut down times.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: pagefile.sys infected
« Reply #7 on: October 09, 2009, 12:38:07 AM »
I mean:"Shutdown: Clear Virtual Memory Pagefile.  Should I enable this off?

Not necessary. Next boot, a new file will be created.
The best things in life are free.

CARLIN

  • Guest
Re: pagefile.sys infected
« Reply #8 on: October 09, 2009, 03:45:11 AM »
Again: thanks a lot!!

Offline nmb

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3054
Re: pagefile.sys infected
« Reply #9 on: October 09, 2009, 05:58:19 AM »
you can disable it if you want.

you are welcome.

Glad I could help.

nmb