Hi, Advise me please ,I’ve just found malware (Win32:Hybris-44 [Drp] ~ Dropper ~ ) in C:\WINDOWS|MEMORY.DMP ,
the recommended action is to put it in the virus chest but at just over 1Gb i can’t do so (Despite having over 30Gb free space on the HD)
Is there a way to expand the size of the virus chest? The only other action is to delete(I don’t think that’d be wise?)
I’d Really appreciate any advice if you can help , Thanks for your time
Is this avast 4.8 you have? http://download602.avast.com/files/manuals/user-manual-pro-eng.pdf
page 48 - 49 see end of page 49
Win32/Hybris
http://www.eset.com/threat-center/encyclopedia/threats/win32hybris
Check your computer for Malware with
Malwarebytes Antimalware http://filehippo.com/download_malwarebytes_anti_malware/
after install click UPDATE and run cuick scan, click on REMOVE SELECTED to quarantine anything found
SUPERAntiSpyware http://filehippo.com/download_superantispyware/
Are cookies really spyware and are they dangerous?
http://www.superantispyware.com/supportfaqdisplay.html?faq=26
If anything is found come back and post the scan logs here
Yes, there is a way to increase the chest and max file size to send, see image, but in this case it really isn’t required.
- The memory.dmp file is created when your system crashes it contains what is in memory at the time of the crash, which could have contained malware. It could be as large as your memory so may not be allowed to send to the chest without changing the settings.
If you have the tools and experience you can examine this file to help discover why the crash happened, if you don’t have this experience and tools, it is worthless to you. The older the file is the less worth it is also.
If windows were to crash again then it would create a new memory.dmp file if one wasn’t present or replace any existing one. So there really is no downside to deleting this memory.dmp file.
thanks David, that is good information- and is no doubt the reason for the problem. I’m currently running Malwarebytes software on Full Scan(on advice from Pondus )- it’s spotted 1 problem so far,but i thank you for giving the detail about its probable cause. Always willing to learn, appreciate your time and advice and will re-post with results ,it’s just reported it as a fake trojan? Hopefully that’s the case ,will repost after looking into it.
with thanks,and respect~ Brickscratch
As the malwarebytes scan showed it to be a false alert that is a relief, doubly so after DavidR says the file Can be deleted I’ve just done that too. the system did go blue screen a few weeks ago, it must of established that file then i’m guessing?
Again my thanks to both “Pondus” and “DavidR” for the quick response and information given-huge respect to you and VERY grateful for the Forum. If any use,I will forward data avast as advised by Pondus and David, I hadn’t even thought of looking at the settings menu,I went into a panic, a newbie error~Cheers Guys,
With Much appreciation ~ Brickscratch :
No problem, glad I could help.
Welcome to the forums.
Must be in the definitions… I did a scan with BART on all of our computers at work and got the same virus in the page file on 8 out of 9 workstations. They all were running Service Pack 3, however the ninth was our CCTV system running XP Home (the other 8 were XP Pro). Kept me up all night!!! :-X
Oh well, BART really did clean up some messy virus’s tho 
@ R1Andy
Go to PROFILE then Modify Profile then Forum Profile Information then Signature: and put information about your system(s) if you like just like my signature and DavidR who is an avast! Überevangelist 8) and in Account Related Settings select Hide email address from public to prevent scammers and spammers harvesing your rainoneinc.com email address.
In Modify Profile then Please select your country: in Forum Profile Information
Then we can offer pertinent hints for your situations.
how’s that?