Scanning Win7 finds this Trojan in Pagefile.sys. No matter how many times it is deleted it returns from each scan. There appear to be no mal effects but that doesn’t mean there are none of course. Can anyone say whether this is a real trojan. I have looked in the forum but reports seem inconclusive and no incidents appear to be in pagefile.sys.
I would be grateful for advice please.
Michael
Hi,
pagefile.sys is swap file of Windows and I thing, that can’t be deleted from partition which belongs to currently running Windows. This file can be added to exclusions from scaning. I thing this file is renewed after reboot. So no threat from this file.
Milos
you can tweak to clean the page file on system shutdown:
control panel > administrative tools > local security policy > local policies > security options > scroll down and double click Shutdown: Clear virtual memory pagefile and enable it > ok.
thanks
nmb