|
-
August 8th, 2005, 11:51 PM
#1
cisvc.exe detected as infected
I just ran an online scan with Trendmicro's scanner and then another scan with my onboard AVG(scanned earlier today but AVG had an update so I scanned again). Both scans earlier today showed up as clean. But this time, AVG detected cisvc.exe as being infected with Dropper.Agent.8.B. The path to the file is C:\Windows\$NtServicePackUninstall$/cisvc.exe. Avg deleted the file. There are a few things I want to know though. Was this detection just added today(I ran AVG earlier and nothing was detected), or did I pick this up from some site I was at? Though if that is the case, I don't see how, seeing as I don't go to any site that would be considered questionable. Also, is this a legit file that was infected or is that the virus itself? I couldn't seem to find a straight answer from my google and yahoo searches. I also couldn't find anything on Dropper.Agent.8.B anywhere, not even the AVG site. Is it possible this was a false positive?
EDIT: I just ran a search on my computer for cisvc.exe and there were two more, one located in C:\WINDOWS/system32 and another in C:\WINDOWS\ServicePackFiles\i386, so it would seem that there is a legit file by that name.
Last edited by Syzich; August 8th, 2005 at 11:55 PM.
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Posting Permissions
- You may not post new threads
- You may not post replies
- You may not post attachments
- You may not edit your posts
-
Forum Rules
|
|