It seems that ever since the start of November, my ESET has been
nagging me about a possible virus variant known as Win32/Statik in
lsass.exe & smss.exe (both found in AppPatch folder under the
WINDOWS directory), however it only gives me the option to
disconnect, so I decided to install MalwareBytes and did a scan, it
detects the very same two files have been infected by Worm.Autorun
but I choose not to do anything with them as I believe they are
system files, so I am wondering is there any way I can replace the
system files with my system disc?
The scan log:
Malwarebytes' Anti-Malware 1.41
Database version: 3131
Windows 5.1.2600 Service Pack 3
Files Infected:
C:\WINDOWS\AppPatch\lsass.exe (Worm.AutoRun) -> Not selected for
removal.
C:\WINDOWS\AppPatch\smss.exe (Worm.AutoRun) -> Not selected for
removal.
C:\WINDOWS\Help\svchost.exe (Worm.AutoRun) -> Not selected for
removal.
C:\Program Files\RRecycled.scr (Worm.AutoRun) -> Quarantined and
deleted successfully.
C:\backupuser.exe (Worm.AutoRun) -> Quarantined and deleted
successfully.