Hi all, I am working on a problem and need some help…a lot of help :slight_smile: It is related to pagefile.sys. I ran BART and it reported an infection, ZLOB, with the infected file pagefile.sys. BART removed it from the directory, said it was deleted so I thought I was home free. However, when Windows booted and re-built pagefile.sys it placed pagefile.sys back in the same area on disk, so I had to use the shreader option BART provides. That seemed to work. AT least until I rebooted Windows and then later ran BART again. ZLOB was back. I repeated the process and found that other infections would come up, also attached to pagefile.sys, such as Agent, BV, and a few others. I have ran AVAST’s own AV, as well as Trend-Micro, Norton, AVG, and quite a few others. In all cases they report no infection so take no action. But when i run BART again it reports the infection. I think thats because they may not be able to scan pagefile.sys as it is in use, and a Windows Protected File. I have tried turning System Restore off, turning pageing off, and a few other things. I have not tried a 5 pound sledge yet…but it may come to that :). I also tried moving the pagefile to another disk, but that was unsuccessful as well. I have searched all over for information and have yet to find much. I am somewhat convinced that the real culpret is somehow imbeded in Windows XP Pro, and when Windows sets up pagefile.sys at boot time…whammo! As to why no AV software finds it is beyond me. My question is has anyone else experienced similar problems and if so, did you get rid of this pest.

Thanks
Mike Nelson