See this thread:
Hope it helps..
I have just done a sweep with MBAM, (updated a couple of minutes before), and it is reporting 3 trojan infected beep.sys files on my system. They are;
"Trojan.Patched", file, in C:\I386\BEEP.SYS
"Trojan.Patched", file, in C:\Windows\System32\Drivers\Beep.sys, and
"Trojan.Patched", file, in C:\Windows\System32\DLLCACHE\beep.sys, (DLLCACHEis a hidden folder).
That was in the MBAM results window. The log file shows
C:\I386\BEEP.SYS (Trojan.Patched) -> No action taken.
C:\WINDOWS\SYSTEM32\DRIVERS\BEEP.SYS (Trojan.Patched) -> No action taken.
C:\WINDOWS\SYSTEM32\DLLCACHE\beep.sys (Trojan.Patched) -> No action taken.
I am wondering if these are false positives. All of the beep.sys files (Properties), show the same file size, 4.12KB, (4,224 bytes), 2 were created on August 29 2002, and the 3rd on Sept 6 2003. I purchased this computer in September 2003.
I have uploaded the files to http://virusscan.jotti.org/ and their online scan found no infection in two of them. The site wouldn't accept my 3rd file, telling me off for sending duplicate files,
I have researched both beep.sys and Trojan.Patched in Google, and have found tons of results, but many are confusing. A couple of forum results seem to suggest MBAM is reporting beep.sys as a false positive. Results for Trojan.Patched are mostly, "How to remove", but I am not yet convinced I have anything to remove.
What I have done so far;
AVG Free version, (updated). Full scan, no infections found. Daily scheduled scans.
MBAM Free version, (updated). Full scan, results above. Manual scans once a week.
Windows Defender, (updated). Full scan, no spyware found. (Weekly scan schedule, but I ran a manual scan just now).
(Spybot S&D, installed but no longer used).
Spywareblaster, updated and inoculated.
Sophos free Anti-Rootkit installed, latest version, full scan, no rootkits found.
Dell 8300 3.0 GHz Pentium, 2 GB RAM, 220GB Raid 0 hard disk. Windows XP Pro, SP3 and fully updated.
Any ideas? I am almost convinced this is a false positive.