Win32:Zlob-32 [Tri] in C:\hiberfil.sys

Hi,

A boot time scan found Win32:Zlob-32 [Tri] with a threat severity as High, in C:\hiberfil.sys. It appears in the Scan results log along with the other threat that was found and chested successfully. I tried first to repair with was unsuccessful and then to Chest which was also unsuccessful, with a message to say the disc was full.

I can’t see C:\hiberfil.sys in the Windows explorer nor in a Command Prompt window.

I understand this file is something to do with the Hibernation feature, which I do use, so I don’t want to lose that facility.

Oh I should add that a full system scan afterwards produced no threats.

Any advice please??

Run a boot time scan with avast.
asyn

Did you modify any of avast! default scan Settings ???

You have to enable Windows to see hidden files and and folders:
http://www.bleepingcomputer.com/tutorials/tutorial62.html#winxp

It was with a boot time scan that I found it this morning

No, I didn’t modify any default scan settings, well none that I’ve changed since installing Avast free 5.1.

I did that so I can now see the file in Windows Explorer. I scanned hiberfil.sys with the right click menu and no threats were found. Does that mean I can be sure I’m OK or should I check some other way?

You should be OK.

  1. Sorry, I missed that.
  2. If you fear an infection you can run free Mbam. (http://www.malwarebytes.org/mbam.php)
  • update it before scanning…!!!
    asyn

OK thanks yes I’ll do that once the very slow BitDefender online scanner starts actually scanning!

You’re welcome…!
Btw, forget the BD scan. :wink:
asyn

Yup I cancelled the BitDefender - seemed to be doing nothing. Malwarebytes clean but then I never finds anything. Ah well.

Clean is good…! :wink:
asyn