How to remove [Win32:SysPatch [Wrm]]

Viruses and worms
1

more detail of the warning-
[tr][td]File name:[/td][td]c:\WINDOWS\SYSTEM32\USER32.DLL[/td][/tr]
[tr][td]Malware name:[/td][td]Win32:SysPatch [Wrm][/td][/tr]
[tr][td]Malware type:[/td][td]Virus/Worm[/td][/tr]
[tr][td]VPS version:[/td][td]090705-0,2009/07/05[/td][/tr]

the avast!Warning have recommended me to"Move to chest"
however, no matter which available actions i chose, the system still reply me the same msg.
“cannot process “c:\WINDOWS\SYSTEM32\USER32.DLL” file”
it stated that it is a Read-only file.
After I click the button of “OK”, which is the only choice i can choose, the warning come out again.

How can I remove this Worm?
The system warn me each time I open my notebook.
thx~

2

I have a similar problem - Wrm, but the file name is “X” and is located at System32 with the virus description: Win32:Confi [Wrm].
Every single day the warning comes and choose “the chest”.
Regarding this problem, I had sent already a couple of emails to avast support … without reply :-X

3

You could try DrWeb Cureit. This used to be able to repair the system file. However, this is probably a new variant, so it may not work. http://www.freedrweb.com/
You may need to run the tool in safe mode

4

How about using MBAM^^

It may help^^

(www.malwarebytes.org)^^

-AnimeLover^^

5

Please stick to the http://forum.avast.com/index.php?topic=43450.0 topic (which is the same) as this one isn’t similar at all and will just confuse this topic.

6

Try to got Avast! and MBAM + run a scan with both its will kill everything on his passage. its a major kit :slight_smile: