virus recovery question

[Bryan Hranek]

I recently reinstalled norton antivirus on my computer and
it found Backdoor.jeem in C:\WINDOWS\system32\msrexe.exe.
Can I safely delete this file, msrexe.exe, or does it need
to be replaced for windows XP to function properly? If it
does need to be replaced, how do I do this without
reinstalling the entirety of Windows XP? Right now, the
infected program is quarantined.

 

[CRS]

The infected file can be deleted, but to do a complete removal you also
need to delete the registry keys that the trojan has created. Details
on what these keys are can be found on the Network Associates website:

http://vil.nai.com/vil/content/v_99793.htm

Needless to say, take great care when making manual changes to the WinXP
registry (I'd recommend creating a System Restore point before making
any changes, just in case anything goes wrong).

Good luck.

CRS.

________________________________________________________________________
Original message from Bryan Hranek follows ...

 

[Richard Keirle]

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.jeem.html

removal instructions are a little further down the page.

regards, Richard