More virus related questions...
16 years ago
General
I am presently using Webroot Antivirus which is a very very good program and is used in the state capitol. It keeps detecting this virus, and I've located the file but am afraid to delete it as it could harm my computer. Webroot won't even allow me to quarantine the item. It keeps saying "Quarantine Failed". What should I do?
Informational: AV engine detected Troj/User32Hk-A in file C:\WINDOWS\system32\user32.DLL
Virus found: Troj/User32Hk-A
Informational: AV engine detected Troj/User32Hk-A in file C:\WINDOWS\system32\user32.DLL
Virus found: Troj/User32Hk-A
FA+

As for removing it, I'm having trouble finding information on that. Have you tried running Windows in safe mode, and running your antivirus software that way?
While I'm not entirely familiar with how Windows versioning works, I think it likely that the virus's infected version of user32.dll would retain normal version information so that people couldn't find out that easily.