i recently installed avast home. it is picking up win32 cidoor-B trojan in services.exe. nortons does not pick this up and im wondering whats going on. there is also 2 services.exe in processes list. is this normal? how do i get rid of this trojan? avast can not access file because it is been used by system.
Hi,
what Win do you have ?
are all Windowsupdates applied ? CHECK!!
where exactly does avast find the infected file ? (full path/folder/filename; see avast report/log)
copy the file to a new, empty folder, and scan it there with Onlinescanners from Trend & KAV (see below; disable avast shield for this…) report findings here…
Where else do you find services.exe on your PC ?
(configure WindowsExplorer to show all files/folders, incl. system&hidden files…!!)
Please be more exact in your Spelling:
do you mean maybe
Win32:Ciadoor-B [Trj] ??
if so, look here:
VGREP
follow the links to mcafee & symantec for info&removal
if you have XP or ME, disable SystemRestore before removal (see links) 
sorry about lack of info
winxp pro sp1
c:\windows\services.exe
i copied and scanned and yes you were right its
win32 ciadoor-b
yes all windows updates are up to date.
services.exe is showing up twice in system processes. trying to delete this file. thankyou for your help
also found services.exe in C:\windows\system32