Hi I’ve been getting these messages that Avast found a trojan in this location:
C:\ProgramData\Dell\SARrmrdietions\SystemRepair\Snapshots\Backup(some long string of numbers and letters that end with .msi)
what is this and how can I solve this? I got at least 10 in the past week and I keep deleting them but they are coming back
Can you post a screenshot of the Avast alert pop-up, including the “Show Details” part.
The Avast alert popup would indicate which Shield was detecting the malware and locking it in Quarantine. I assume it is File Shield.
What event is triggering that file. Is it some Dell utility that is being run from time to time?
Have you run a Full scan of Avast and maybe also a Rootkit scan with Avast.
Another thing to try is a manual scan with Malwarebytes. (but do not activate Malwarebytes real-time shields which could fight against Avast shields).
I have not used Quarantine for years, but if you click the three dots alongside the file listing i.e. “…” , is there an option to select that file to accompany a False Positive report?
To report a False Positive file see this: Choose Your Sample Submission Type | Avast
You may also want to search the web using searchterm “BV:Agent-CAT [Trj] avast” for more advice.
1 Like
thank you I will do that