Win32:Agent-OLD [Trj] Again

Viruses and worms
1

Hello!

I seem to be having the same problem that a lot of others are suffering from and it really seems to be only avast that is picking this up:

File Name: C:\System Volume Information\catalog.wci\00000002.ps2

Malware Name: Win32:Agent-OLD [trj]

I have tried the solutions posted in Raybo’s Topic, this works for no longer than a day and it keeps coming back. I turn off system restore, run a boot scan of C:\System Volume Information, then delete the file via Avast (i have also tried putting it in the virus chest and deleting it), turn system restore back on, scan C:\System Volume Information again and the trojan has gone. But next day I turn on the pc, run avast and it’s back again.

Can it be said 100% that this file is not a Trojan and is just a harmless file, especially as Avast is the only scanner to pick it up (i’ve have ran AVG, Spybot and ADAware and none of these report a problem)??

2

As a workaround, you can add these files to the Standard Shield provider (on-access scanning) exclusion list.
Left click the ‘a’ blue icon, click on the provider icon at left and then Customize. Go to Advanced tab and click on Add button…
You can use wildcards like * and ?. But be carefull, you should ‘exclude’ that many files that let your system in danger.
After that, please, periodically check it - scan it into Chest, right clicking the file - there should still be a copy in the chest even though you restored it to the original location. When it is no longer detected as being infected then you can also remove it from the Exclusion list.

Hope they correct this false positive detection (if it is so).

3

Ok, cheers Tech! Will give that a go