Author Topic: Win32SysPatch  (Read 4117 times)

0 Members and 1 Guest are viewing this topic.

rdraper9

  • Guest
Win32SysPatch
« on: January 30, 2009, 11:48:27 PM »
Summary
Type Virus/Worm
Aliases Backdoor.Zapinit, Win32/Pruserinf, Trojan.Win32.Patched.bb, Trojan.Win32.Patched.dr, Win32/Pinit
Platform Windows
Known locations %WINDIR%\system32

Description
Win32:SysPatch injects the user32.dll file with its own data and forces it to load malicious DLLs. These DLLs are intended to collect network traffic data and are able to control locally running processes from a remote machine and to download/send data through an open backdoor.

Detection/Removal
avast! with VPS file 081222-0 or later is able to detect this family of malware. For the removal instructions please visit our forums.

CANNOT move or repair.  Sometimes when I am running application they just disappear.  What can I do to get rid of this problem?

micky77

  • Guest
Re: Win32SysPatch
« Reply #1 on: January 31, 2009, 12:04:38 AM »
You could try Drweb cureit tool.Have a look at the link,some claim the tool removed the threat.I think, you need to scan in safe mode.

http://forum.avast.com/index.php?topic=41227.0

http://www.freedrweb.com/
« Last Edit: January 31, 2009, 12:08:55 AM by micky77 »

rdraper9

  • Guest
Re: Win32SysPatch
« Reply #2 on: February 02, 2009, 05:55:32 PM »
Thanks - I did run drwebb - and it did find and cure the problem. 

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Win32SysPatch
« Reply #3 on: February 02, 2009, 06:32:46 PM »
Thanks for the feedback, welcome to the forums.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security