delete or not?

Avast Free Antivirus / Premium Security
1

I run the Avast on my computer (windows XP) and it find
File C:\WINDOWS\autoclk.exe is infected by Win32:Agent-WOH [Spy], Repair: Error 42060 {The file was not repaired.}, I pres 1 to delete and get message “are you sure it is in Windows” or something like that. So I do not know if I CAN delete that or NOT, i.e will windows work after deleting. What to do? Thanks for your kind explanations.

2

Deletion isn’t really a good first option (you have none left), ‘first do no harm’ don’t delete, send virus to the chest and investigate. e.g. google the file name, etc.

See http://www.bleepingcomputer.com/startups/autoclk.exe-8060.html.

It is a common trick to place files in windows and system folders as users are frightened of the consequences of deleting an important file, avast is just advising caution. Send to the Chest is by far the best option, it can do no harm there and can be restored if necessary (not an issue in this case).

3

I suggest:

  1. Disable System Restore and reenable it after step 3.
  2. Clean your temporary files.
  3. Schedule a boot time scanning with avast with archive scanning turned on. If avast does not detect it, you can try DrWeb CureIT! instead.
  4. Use SUPERantispyware, MBAM or Spyware Terminator to scan for spywares and trojans. If any infection is detected, better and safer is send the file to Quarantine than to simple delete than.
  5. Test your machine with anti-rootkit applications. I suggest avast! antirootkit or Trend Micro RootkitBuster.
  6. Make a HijackThis log to post here or, better, submit the RunScanner log to to on-line analysis.
  7. Immunize your system with SpywareBlaster or Windows Advanced Care.
  8. Check if you have insecure applications with Secunia Software Inspector.
4

Thanks a lot for your answers and suggestions!
Greetings,
Goca

5

You’re welcome. Feel free to come back any time you need help or just to change experiences 8)

6

No problem, glad I could help.

Welcome to the forums.