Can I safely delete snapshot.etl?

system · 2014-01-29T15:50:52.000Z

A boot-time scan reports “wdi/…/snapshot.etl is infected with Win32:Banker-GVY [Rtk]”. Can I delete this file without compromising Windows functioning?
Thank you for your time.

Pondus · 2014-01-29T15:55:56.000Z

upload and test the file at one of these online scanners. www.virustotal.com / www.metascan-online.com / www.jotti.org

post link to scan result here

system · 2014-01-29T17:02:02.000Z

Thanks for the reply.

Problem is I’m in the middle of a boot scan, with Avast waiting for my response to “File is in Windows folder, are you sure?”. Are you saying I should just skip it, let the scan finish, then go in and copy the file?

essexboy · 2014-01-29T18:07:01.000Z

ETL files are log files that have been created by the Microsoft Tracelog software application. This Microsoft program creates event logs in the binary file format. These logs are created from the kernel in a Microsoft operating system.
The ETL logs can contain information about disk access and page faults, logging high-frequency events and recording the performance of the Microsoft operating system. This information can be used to analyze and adjust voice response software applications.

As it is only a log then you can delete it

system · 2014-01-29T18:18:23.000Z

OK, thanks. Done. Will report any anomalies.

Announcements