It seems that ever since the start of November, my ESET has been nagging me about a possible virus variant known as Win32/Statik in lsass.exe & smss.exe (both found in AppPatch folder under the WINDOWS directory), however it only gives me the option to disconnect, so I decided to install MalwareBytes and did a scan, it detects the very same two files have been infected by Worm.Autorun but I choose not to do anything with them as I believe they are system files, so I am wondering is there any way I can replace the system files with my system disc?
The scan log:
Malwarebytes' Anti-Malware 1.41
Database version: 3131
Windows 5.1.2600 Service Pack 3
Files Infected:
C:\WINDOWS\AppPatch\lsass.exe (Worm.AutoRun) -> Not selected for removal.
C:\WINDOWS\AppPatch\smss.exe (Worm.AutoRun) -> Not selected for removal.
C:\WINDOWS\Help\svchost.exe (Worm.AutoRun) -> Not selected for removal.
C:\Program Files\RRecycled.scr (Worm.AutoRun) -> Quarantined and deleted successfully.
C:\backupuser.exe (Worm.AutoRun) -> Quarantined and deleted successfully.
just remove.
you got infected by the autorun virus, passed around via removable drives.
just delete them, then it'll be okay.