Win32:Agent-GFZ [Trj]

Viruses and worms
1

So basically avast! detected this when I scanned my computer. I put it in quarantine (or chest, or what ever it is called in english version). Should I now just remove the file or what?

original location:

D:\System Volume Information_restore…

file name:

A0018151.exe

2

Hi poex,

There’s no hurry to delete files from the chest (quarantine). Leave them there for a month or so until you can be absolutely sure it wasn’t a false positive ID (which happens sometimes with all AV/anti-spyware progs.)

Deletions of malware from System Restore either don’t work because the files are locked, or break the System Restore feature if successful. Malware in system Restore is inactive, but you want a working, uninfected System Restore point to use in the event of a system problem. Follow these steps:

  1. Create a clean system Restore point:

http://www.bleepingcomputer.com/tutorials/tutorial56.html#manual

  1. Delete all previous System Restore points:

http://www.bleepingcomputer.com/tutorials/tutorial56.html#delete

3

Thank you for help.