Avast WEBforum

Other => Viruses and worms => Topic started by: pitter on February 20, 2006, 04:31:52 PM

Title: Infected sys32.services
Post by: pitter on February 20, 2006, 04:31:52 PM: help me please. Infected sys32.services(my computer)

(http://img126.imageshack.us/img126/355/adsz1qr.png)

infected by removeit pro and AntiVir PErsonal edition but not deleted...

I cant delete(tested: win mode and safe mode)

formatted c: but no deleted

Sorry my english some bad.

HElp please
Title: Re: Infected sys32.services
Post by: pitter on February 20, 2006, 04:36:44 PM: stinger infected :'(

(http://img316.imageshack.us/img316/596/adsz7jx.png)

ooooooofffffffff

help
Title: Re: Infected sys32.services
Post by: polonus on February 20, 2006, 06:51:53 PM: Hi pitter,

Here are instructions to remove the malware from your system:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FAGOBOT%2EPS&VSect=Sn

greets,

polonus
Title: Re: Infected sys32.services
Post by: pitter on February 20, 2006, 10:59:04 PM: Quote from: polonus on February 20, 2006, 06:51:53 PM
Hi pitter,

Here are instructions to remove the malware from your system:
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FAGOBOT%2EPS&VSect=Sn

greets,

polonus

Hi polonus,

trend micro no found.My computer infect.

formatted c: and mbr clean(mbrtool) but not deleted.

(http://img373.imageshack.us/img373/3054/adsz1rj.jpg)

help me please
Title: Re: Infected sys32.services
Post by: TedNelly on February 20, 2006, 11:18:00 PM: Isn't RemoveIT Pro another AV program as C:\WINDOWS\system32\services is a legit Windows file. This appears to be a false posative generated by RemoveIT Pro I may be wrong
Title: Re: Infected sys32.services
Post by: CharleyO on February 20, 2006, 11:34:57 PM: ***

Yes, it is a type of virus scanner ... though I am not familiar with it to know what type:

http://www.incodesolutions.com/removeit.php

***
Title: Re: Infected sys32.services
Post by: essexboy on February 20, 2006, 11:48:25 PM: I have actually used it as a standby (now v2.4) and have experienced no FP or problems with it. When I first tried it I did post some results around here somewhere I'll see if I can find it.

EDIT here it is http://forum.avast.com/index.php?topic=18942.0