Avast found this during a scan is this real or a FP?

Its a Win32:Agent-EFO.

Original file name A0045055l.exe,

File ID 4.

Its in C:\System Volume Infomation\_restore{129201FA-B0AC-49B3-96B2-DEB8B91I727B}

 

if u want to scan it at jottis or virustotal, u have to show "protected operating system files" to access it.

otherwise, u can just disable/reenable System Restore to clear it out.

 

How do I do disable and re enable it?

 

http://support.microsoft.com/kb/310405

and remember that you will lose all system restore points youve made.

 

What will doing this do? Is it stuck in my system restores?

 

idk if avast can delete a file from System Restore, so thats why i provided teh instructions on clearing it.

 

I put it in the virus chest to be safe. Is that a good place?

 

Have you tried a Boot Time scan with Avast.

 

the virus chest is just like a quarantine.

 

I know.

 

Never did a boot time scan. What is it?

 

Boot-Time scan is an Avast feature that scans the computer on boot before windows starts up, very handy for getting rid of nasties that hide in places it's not possible to delete them from when the system is running.
If you open Avast and right click anywhere on it a menu will pop up and on there you'll see "Schedule boot-time scan" click it a window will open to set the scan, make sure you tick "Scan all local disks" and "Scan archive files".

 

Ok. I'll do that later today. What should I do about the file in the quarantine?

 

u can just delete it.

 

Upload the file to Jotti/Virus Total

 

leave it there or delete it.
Boot-time scans is just one thing that makes avast a winner.

 

Can someone tell me how to get to this file to have it sent to Jotti?

 

open up Folder Options, go to the View tab, and untick "Hide protected operating system files".

then just go to C:\System Volume Infomation\_restore{129201FA-B0AC-49B3-96B2-DEB8B91I727B} and the file should be there. just copy it to teh desktop or someplace and scan it using Jotti.

 

if you right click on avast you'll see virus chest

 

Where is folder options? Sorry its late.

 

its in control panel or in the Tools menu of any Explorer window.

 

once your in the virus chest it gives you several options including emailing it staight to avast home

 

Oh i'll try that