I deleted a "suspect rootkit file" What do I do?

Avast Free Antivirus / Premium Security
1

Hi,
Windows XP SP3. AVAST! 6.0.1829
I deleted a file that was suspect… I had received an email from “USPS” (Truncated on the server) but thought it was infected. A while later Avast! Pops up with possible infection in rootkit. I ran boot scan - Negative.
Warning returned and I deleted the file…

There was 1 other option: ignore

I have done warm boots and the PC is fine.

What do I do?

The warning just returned.
This started today just after updating virus defs…
Currently have:111206-1

C:\Windows\system32\drivers\floppy.sys Rootkit hidden file

Thanks

2

As mentioned in another topic, ensure you have the latest VPS update 111206-2 and reboot 8 minutes after the boot the rootkit happens and you shouldn’t get an alert.

See image extract of the end of the aswAR.log file run after a reboot on my system with that VPS.

3

Success - Thank you very much!

4

You’re welcome.