Please help, can't delete virus

[wayne]

My friend has windows 2000 pro on his home computer.
Yesterday he was having problems so I went over to check
it out and found a virus located at: C:\winnt\winmgm32.exe

Norton 2002 found it but could not quarentine it or
delete it because the file was in use by windows..I then
restarted windows and changed the bios to boot from cd-
rom and used the Norton boot program..it still would not
remove it.
My question is: Can I just re-install either that file
and over write the virus or even re-installl the whole
windows to get rid of it?

 

[Mark V]

wayne wrote in

My friend has windows 2000 pro on his home computer.
Yesterday he was having problems so I went over to check
it out and found a virus located at: C:\winnt\winmgm32.exe

Norton 2002 found it but could not quarentine it or
delete it because the file was in use by windows..I then
restarted windows and changed the bios to boot from cd-
rom and used the Norton boot program..it still would not
remove it.
My question is: Can I just re-install either that file
and over write the virus or even re-installl the whole
windows to get rid of it?

You don't say the name ov the virus/worm... Likely Symantec and
others have detailed removal procedures at their sites...

In any event you need to locate what is actully starting that progrma
and stop it. Then the file can be removed. Use MSCONFIG or other
startup utility to locate the registry entry or shortcut that is
starting winmgm32.exe and delete it. On reboot (hopefully)
winmgm32.exe will not be started, not locked, and deletable.

winmgm32.exe is not a normal part of W2K so not replacement would be
needed. W2K contains a MS file: WinMgmt.exe

 

[Mark V]

wayne wrote in

My friend has windows 2000 pro on his home computer.
Yesterday he was having problems so I went over to check
it out and found a virus located at: C:\winnt\winmgm32.exe

Norton 2002 found it but could not quarentine it or
delete it because the file was in use by windows..I then
restarted windows and changed the bios to boot from cd-
rom and used the Norton boot program..it still would not
remove it.
My question is: Can I just re-install either that file
and over write the virus or even re-installl the whole
windows to get rid of it?

You don't say the name ov the virus/worm... Likely Symantec and
others have detailed removal procedures at their sites...

In any event you need to locate what is actully starting that progrma
and stop it. Then the file can be removed. Use MSCONFIG or other
startup utility to locate the registry entry or shortcut that is
starting winmgm32.exe and delete it. On reboot (hopefully)
winmgm32.exe will not be started, not locked, and deletable.

winmgm32.exe is not a normal part of W2K so not replacement would be
needed. W2K contains a MS file: WinMgmt.exe