From: rednoise@REMOVETHIScomcast.net   
      
   On 05 Oct 2010, SgtBilco@FtBaxter.net wrote in alt.os.windows-xp:   
      
   > Seeking advise for Virus Problem   
   >   
   > Couple of days ago after scheduled scan  AVG anti-virus (fee   
   > version) found Trojan Horse - Patched c.JEF in 3 files -   
   > C:Windows\Explorer.EXE C:Windows\explorer.exe   
   > C:Windows\Explorer.EXE(1600)   
   >   
   > I selected remove all unhealed infections button. AVG said it   
   > removed 2 and said 1 is in whitelist   
   >   
   > I rebooted....now today same thing....AVG is finding same   
   > infections.   
   >   
   > Also scanned with Malwarebytes which found no infections.   
   >   
   > I am running xp   
      
   It may be a false positive and the file may not be infected at all. You   
   should consider submitting the file to AVG and Malwarebytes for   
   analysis and confirmation. There are some other online virus checker   
   services out there (I can't recommend any for you, though.)   
      
   AVG is an anti-virus program. Malwarebytes is an anti-spyware/malware   
   program. Their functions overlap, but they aren't necessarily looking   
   for the same things. They won't give you reliable second opinions on   
   each other.   
      
   The reason it keeps coming back may be due to Windows file protection   
   features. When an important system file is deleted, Windows will   
   automatically replace it with a new copy. In this case, the copy may   
   also be infected (or not.)   
      
   Removing EXPLORER.EXE is a dangerous thing. The system can't function   
   without it.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)