okay, this virus alert has been an on-going issue, for me, for the past two days. A scan of the individual file (WINSYS2.exe) turns up nothing. A scan of the file on virustotal gets 3 hits, from Panda and two other antiviruses, for an 8.34% hit percentage. Avast does NOT detect any virus, when doing a boot-time scan. The only time it detects WINSYS2.EXE is when WINSYS2.EXE decides, on its own, for unknown reasons, to execute, to "come alive." Avast detects based upon heuristics.
So, there is nothing to be gained by renaming backupWinSys2.EXE to WINSYS2.EXE in order to see whether Avast will now detect it. Avast will not detect it. A scan will not detect it. If Winsys2.exe decides, on its own, for unknown reasons, to activate, to behave in a virus-like manner, then based upon heuristics, Avast *might* detect it. However, I've been running 12 hours without issue so I intend to leave WINSYS2.exe renamed and presumably deactivated and neutralized. If the system doesn't really need it, or uses it merely to make the video colors more vivid, as I have concluded from google research, then I can live without it, and I think most people can. It may or may not be a trojan or malware, but I'd rather be safe than sorry.
Avast isn't the only product out there claiming that Winsys2.exe is suspicious - there are three other antiviruses that also have arrived at this conclusion. Granted, the majority don't think so. But in this case, I'm willing to listen to the minority voice, until someone gives a persuasive case as to why Winsys2.exe is *not* malware.