Win32:Agent-SG and Virtual Hard Disks

Viruses and worms
1

Hi all,

I recently ran a thorough scan with Avast 4 on my Win XP Pro machine and it reported my Vista Virtual Hard Disk file (which is huge!) as being infected. The message was:

“Sign of “Win32:Agent-SG [Trj]” has been found in “…\My Virtual Machines\Windows Vista\Windows Vista Hard Disk.vhd” file.”

I regularly run SpyBot, Ad-Aware and Windows Defender, again nothing was reported. Also, Avast AV runs pretty much every night and has never reported a problem before (though not in ‘thorough’ mode).

This seems to me to be a false positive, but I am not 100% sure. Has any one else run into this situation? Any advice would be greatly appreciated.

Thanks!

2

You can send the file to virus (at) avast.com
Or send it to Alwil ftp server if it is too big for an email attachment.
You can add it to the Exclusion Lists as a workaround, until avast correct the detection.
You can check if the file is or is not a false positive against on-line scanners as Jotti or VirusTotal.

3

Thanks Tech.

The file is about 10GB in size, which means I can’t use Jotti or VirusTotal. I did, however, run the online versions of Kaspersky and TrendMicro and both didn’t find anything.

Cheers

4

It’s a false positive, most sure… Just add it to the Exclusion Lists.

5

What if you scan the content of the virtual disk with avast!?
Well, it also might be a leftover from an already deleted file, I guess.