Virus in the c:\windows\system32\owmngr.exe file

[Jeff Longphee]

While out of the country my children stopped my anti-virus
software. After I returned and scanned the computer i got
a message re the Win32:Trojan-gen. {Other} virus in the
file c:\windows\system32\owmngr.exe file. Being
apparently a system file I did not want to immediately
delete or alter the file. Can someone tell me if this
file can be deleted or altered? IF not how do I obtain a
clean copy?

I also got a warning about viruses during the boot up in
\system volume information\_restore\RP65\a0008257.exe and
other files in the same location. However, I can no longer
find this file. Is this a temporary file for bootup?


I am running windows XP Version 5.1 Build
2600.xpsp2.021109-1929 with service pack 1 installed.

Appreciate your usual invaluable assistance. If I haven't
said it before you always seem to have the answers in
these newsgroups.

Regards,

Jeff Longphee

 

[Jupiter Jones [MVP]]

Jeff;
That file is created by the Trojan:
http://securityresponse.symantec.com/avcenter/venc/data/trojan.download.chekin.html

 

[Guest]

Make sure your antivirus program is upto date with the latest virus
definitions.
What virus scanner are you using? {Other} tends to indicate a virus picked
up by heuristics (looking for virus like instructions). If you are using
Norton Antivirus then send the file to Symantec through the quarantine
menus. They will identify it for you if they can. I would quarantine the
file immediately.
Set Heuristics to High or Full (depending on your antivirus program) for
manual scans and do a full virus scan of your computer with the latest
antivirus updates.