Having a problem with this virus http://www.avast.com/eng/win32-syspatch.html, It attached itself to my user32.dll file. When I try to do anything to it it just says that the file is read only and nothing can be done to it. I checked the file it’s not even read only though I do know it’s an important system file. Once again I can’t move it to the chest or anything, and also I think it affected my internet because it wasn’t working before and it was saying that the proxy’s were being blocked or something. I ran the avast scan and did the recommended on-boot scan and it’s still here and it still wouldn’t let me do anything to. Suggestions please?
Try Drweb cureit, this is supposed to be able to repair the file.If you have no success in normal mode,try running in safe mode.
http://www.freedrweb.com/cureit/
DrWeb is able to clean the older variants of Win32:SysPatch, but it misses the newest variant… this infection has been mutated a bit (e.g. 12 days ago) and avast was the first, who detected it… sophos was the second (few days later)… anyway, i’ll retry the capability of other AV engines to detect it and i’ll let you know…
http://www.virustotal.com/en/analisis/83850ce628f7264e446bfcfd4ea6dc66 still a very poor coverage…
I see that DrWeb, BitDefender, Kaspersky, Mcfee and even AVIRA are also including repair routines for file infectors. Why do i have a feeling avast! doesn’t seem to be able to use Repair feature for any virus that modifies files? I know that requires lots of work, but theen again users sometimes also expect it to fix stuff here and there. Because Repair function is obsolete otherwise.
I thought the Virus Recovery Database can repair files to their oridginal code if you let it generate the computer and then if a virus hijacks lots of your games, you can recover it.
VRDB is suppose to work with old simple file infectors and doesn’t work with Virut or other dvanced infectors that sometimes corrupt files beyond repairability.
I seem to have the same virus/problem. I have run Avast AV and gotten rid of everything except the win32: syspatch I’ve read a lot of the posts by Polonius (sorry if I remembered the spelling incorrectly) and it seems to be over my head. My question - what does this virus DO? My computer seems to be working fine, but am I doing more harm by waiting to get this looked at? Also, when I log into my email I get the virus warning for this “virus”, is it related to an email? I’m just wondering how long I can wait to have it looked at and what is it doing during that time. Thanks!