Virus or FP?

Viruses and worms
1

Hi :slight_smile:

I did scan wit Drweb and drweb found A0000093.exe(i sent this file to VT)

Virustotal report:http://www.virustotal.com/analisis/dc74759a230439f47d4bf4499c813b655ac0fca1410131dc25f28de2d415a3ed-1257931607

Thx and have a nice day. :slight_smile:

2

Hi,
I’ve found nothing bad.

Milos

3

Should I send this file for analysis?

Have a nice day. :slight_smile:

4

The filename looks like its in your system restore. Did you delete the original reboot.exe recently.Some sort of tool perhaps ?

5

I didn,t delete this file.

6

So what is the path/location of the file

Did you run smitfraud recently ?

7

Local disk(F)-system volume information-_restore{1C07EBCB-747B-4774-AC47-5450C9555A3C}-RP2-A0000093.exe

8

As i suspected, this find, is in your system restore.You have deleted something recently, probably a virus or removal tool. A copy has been made in a system restore point. So basically it can do no harm, unless you restored the pc to that point, which could restore the original.If you are concerned,you could disable/re-enable system restore.This will delete all restore points.

9

Hi JuninhoSlo,

This must have been traces of a Trojan-Dropper.Win32.Agent.dgo infection in your system restore,

polonus

10

No, I’ve found the file in our database by checksums from virustotal link you posted.

Milos

11

What should I do?