My AVG antivirus keeps reporting that cisvc.exe is a Trojan Horse Dropper Agent.8.B I select remove to Vault and a windows protection screen pops up and tells me this is a system file and I should insert XP cd. I insert the cd and nothing happens. I tried copying the file from another computer and the same thing happens when I replace the file, AVG catches it and removes it to virus vault. Is it really a virus or should I leave it? I have disabled system restore before running the virus scan. Any input would be appreciated Thanks Chad ASUS A7V8X Athlon XP 2700+ @ 2.17ghz 768MB DDR 2700 nVidia 128mb FX 5200 WD 80gb SE NEC ND-3500AG DVD R/RW

When you turned system restore off, did you restart the computer and during the restart enter the safe mode and run AVG while in the safe mode?

Chad, DOo NOT delete that file. I found a discussion on the AVG free forum: quote: Dear Sir/Madam, > > Thank you for your email. > > Yesterday, we noticed a false alarm on file > > C:\Windows\System32\cisvc.exe > > This file was detected as a > > Dropper.Agent.8.B > > in Windows XP with Service Pack 1, but this false is already fixed > by the latest update. Please update your AVG and run a Complete Test > again. In case that there will be still some infection, > please run AVG program (basic or advanced interface) and > choose Test Results from Results menu (you can also use F6 key > to get the same). Now you can see the list of finished tests, double > click the latest one (by date) and you will get the full list of > detected viruses (if there were any), including the path, the name > and status of infected object. When it is opened, go back to > main AVG program screen -> Program menu -> Export... item (or you > can user Ctrl+S shortcut to get Save as... option). Please send > this created file for further analysis. > > Thank you. > > Best regards, > > Alena Kasparkova Note: The above info was from the link below. AVG Problem with cisvc.exe Tufenuf

Thanks Tufenuf for helping search for this ordeal. I'm on broadband so my AVG is as up to date as it can get. After today's update I went to virus vault and restored the file then ran AVG again. This time no virus was detected. I was almost certain it had to be a AVG error because when it was extracted from the XP cd it would automatically say it detected a virus and delete it immediately. Now would Microsoft put a virus on their CD? Mabey but I doubt it LOL. I usually don't run a full virus scan and rarely download anything suspicious or visit unknown sites on this computer. The only thing that brought this up is my girlfriend has been using IE under her account and I have to start running Spybot to clean up after her. Spybot must have triggered the cisvc.exe somehow because that's when it poped up virus under AVG. Thanks again for your help. Chad ASUS A7V8X Athlon XP 2700+ @ 2.17ghz 768MB DDR 2700 nVidia 128mb FX 5200 WD 80gb SE NEC ND-3500AG DVD R/RW

file cisvc.exe is a system file but same filename is used by other malicious programs. You need to look at the file location or use automated removal program

Chad (by ludedude25)says, "I was almost certain it had to be a AVG error because when it was extracted from the XP cd it would automatically say it detected a virus and delete it immediately. Now would Microsoft put a virus on their CD? Mabey but I doubt it LOL." Unfortunately Microsoft doesn't always check software that is placed on the market. There was and instance where Microsoft made the Korean XP version, sent it to Korea for tests, and after reception of the results packaged a virus packed edition of XP Pro. Granted this has nothing to do with cisvc.exe; however, I am just making you aware.