This popped up during a scheduled scan on an application server running Windows Server 2008 R2.
File "Process 1740 [cmdnetw.exe], memory block 0x00000000767A0000, block size 856064 (kernel32.dll)" is infected by "Win32:Cycbot-KI [Trj]" virus
File "Process 1628 [avastnet.exe], memory block 0x00000000767A0000, block size 856064 (kernel32.dll)" is infected by "Win32:Cycbot-KI [Trj]" virus
File "Process 752 [avastsvc.exe], memory block 0x00000000767A0000, block size 856064 (kernel32.dll)" is infected by "Win32:Cycbot-KI [Trj]" virus
and about 8-9 other processes are being flagged as infected.
We are using avast Business Protection Plus, definition version is 110925-0, program version is 6.0.1253.
I'm about 90% positive this is a false positive after searching Google. Can anyone confirm what I'm thinking?