Hi whocares (though you do :wink: )

In my above post, ‘C:\pafefile.sys’ should be ‘C:\pagefile.sys’… sorry

‘System restore’ is already disabled.
Full scan in safe mode?! It seems Avast cannot open C:\pagefile.sys in safe or normal, it reports “path not found”!
Only in boot scan Avast detected (sometimes) the ‘Win32:Dialui-B [Trj]’ in it.

Since I am not now on the infected PC, soon I will post the log of hijackThis of it. Thank you for asking :slight_smile:

You are right, ‘teatimer’ of Spybot is enabled (I don’t run Ad-Aware). By the way, do you think ‘teatimer’ is running even while Avast scans in boot mode? (because it seems C:\pagefile.sys, a windows file, can be scanned only in this mode as I mentioned in the beginning).

By the way, I noticed in the registry 3 keys about pagefile, one copy is:

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management
ClearPageFileAtShutdown REG_DWORD 0x00000000 (0)

Perhaps if 0 is changed to 1 (in similar keys too) that pagefile.sys could be reset. ???

Of course, I’ll change nothing… only when asked :slight_smile:

Kerim