Hi,
if it’s a .CPY file, and it’s found in the _ESTORE-folder: disable RESTORE & reboot. Details: read link “VirusRemoval” below