cisvc.exe detected as infected
Results 1 to 6 of 6

Thread: cisvc.exe detected as infected

Threaded View

  1. #1
    Join Date
    Apr 2004
    Posts
    683

    cisvc.exe detected as infected

    I just ran an online scan with Trendmicro's scanner and then another scan with my onboard AVG(scanned earlier today but AVG had an update so I scanned again). Both scans earlier today showed up as clean. But this time, AVG detected cisvc.exe as being infected with Dropper.Agent.8.B. The path to the file is C:\Windows\$NtServicePackUninstall$/cisvc.exe. Avg deleted the file. There are a few things I want to know though. Was this detection just added today(I ran AVG earlier and nothing was detected), or did I pick this up from some site I was at? Though if that is the case, I don't see how, seeing as I don't go to any site that would be considered questionable. Also, is this a legit file that was infected or is that the virus itself? I couldn't seem to find a straight answer from my google and yahoo searches. I also couldn't find anything on Dropper.Agent.8.B anywhere, not even the AVG site. Is it possible this was a false positive?

    EDIT: I just ran a search on my computer for cisvc.exe and there were two more, one located in C:\WINDOWS/system32 and another in C:\WINDOWS\ServicePackFiles\i386, so it would seem that there is a legit file by that name.
    Last edited by Syzich; August 8th, 2005 at 11:55 PM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •