winmgts.exe infected

[Claire]

Norton has quarantined c:\windows\winmgts\winmgts_.exe
and has not been able to repair it. Should I delete this
file? Or just leave it quarantined. If I delete it,
should I replace it and how?

 

[James Martin]

Hi Claire,

As far as I can tell (I'm using XP Pro, so it's possible
it's different on XP Home), this is not a system related
file (there is one called winmgmt.exe though). If it's
quarantined, you are probably safe just leaving it. Also,
check out http://www.trendmicro.com/vinfo/virusencyclo/ and
look up the virus name that Norton reports. This site also
has a free online virus scan that you can use to supplement
Norton. The important thing to know is that while
quarantined it can't do anything malicious.

-James

 

[Sharon F]

Norton has quarantined c:\windows\winmgts\winmgts_.exe
and has not been able to repair it. Should I delete this
file? Or just leave it quarantined. If I delete it,
should I replace it and how?

If the file is quarantined, it is already out of the loop and not being
used. If not getting any messages about it being missing, deleting it would
not do anything different at this time.

Check your log in Norton to see what it virus (worm or trojan) it has found
in that file. Then look it up at www.sarc.com

You may also find the info at this URL of interest:
http://www.doxdesk.com/parasite/MagicControl.html