Win32:Hupigon-ONX [Trj] Virus!!

[dan56997]

I was doing a boot time scan with avast, and it detected Win32:Hupigon-ONX [Trj] on a file called C:\hiberfil.sys .
And i cannot get rid of it because if I tryed to delete it, it would say: Could not delete because the share flags are incompatiable.

And i could not move to chest, or repair the file.
 

[Pondus]

Win32/Hupigon
http://www.microsoft.com/security/portal/Threat/Encyclopedia/Entry.aspx?Name=Win32%2fHupigon


Try this

Malwarebytes Anti-Malware 1.50.1 http://filehippo.com/download_malwarebytes_anti_malware/
always update the program so you have lates database before you scan
click the remove selected button to quarantine any infections found
you may post the scan log here

[essexboy]

To clear it - turn off hibernation and the reset it C:\hiberfil.sys .

[dan56997]

I tryed the scan with Malwarebytes, updated it to the latest database version, and did a full scan, but it found nothing
Heres the scan log:
Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5532

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

16/01/2011 20:14:19
mbam-log-2011-01-16 (20-14-19).txt

Scan type: Full scan (A:\|C:\|D:\|E:\|)
Objects scanned: 255680
Time elapsed: 3 hour(s), 20 minute(s), 46 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

[essexboy]

It could be a false positive in the hiberfile.sys could you reset the hibernate and then see if Avast still finds it

[DavidR]

If it still finds it then you might want to exclude the hiberfil.sys file in the avastUI, Settings, Exclusions and copy and paste the C:\hiberfil.sys path into the new entry.