Posted 01 August 2008 - 01:28 PM
Yesterday I removed a WinAntivirus2008 infection from a machine, but today, TrendMicro has identified a file named 'user.dll' as infected with 'Mal_patch_1'. This seems to be a general identifier for worms similar to Trojan.Pandex(Symantec). It is located in the Windows\System32 folder.
Is this a legitimate Windows file, or something made up by a virus/worm?
I renamed it 'user.old', and the computer did not crash, but I did not restart it.