Hi, after the last Update CIS detects these files
C:\WINDOWS\system32\advapi32.dll
C:\WINDOWS\ServicePackFiles\i386\advapi32.dll
as
TrojWare.Win32.Trojan.Agent.~DSS[at]
I think these files are clear, because they come with WinXP SP3.
Files are attached.
password: infected
€:
Sorry read the other post. filed deleted and send via e-mail