I see your Google web hits for Oberon. I doubt very much it's something you
have.
http://www.bodley.ox.ac.uk/erl/wattcp/install.txt
| Installation of PC-Spirs for Waterloo Packet Driver TCP
|
|
| ERLCLNT.CFG
| INSTALL.EXE
| SYSTEM1.EXE
| SYSTEM2.EXE
| PING.EXE
| TCPINFO.EXE
| WATTCP.CFG
|
| You will be prompted for a directory in which the search software
| should be installed - the default is C:\SPIRS and this would normally
| be acceptable.
Not only is it more or less obscure, this packet driver stack, but mainly
this: Note how the legit set of files go into their own directory.
You probably won't find many of those other filenames mentioned as part of
that group on your system (minus ping and install). Also, right-click on
System2.exe and I see that the properties (file headers) probaby won't say
Oberon or Spirs.
It is the habit of trojans and malware to try to hide in your system
directory, and use names they think you'd be less likely to notice, such
as system.com, windows.exe, etc.
Instead of the Google web search, try a Google groups search. There are
only a few threads that get hits on that filename. But notice that in those
threads, it is the same symptoms you have described earlier in this thread.
It sounds like it is a simple trojan, and not a virus. Not a virus would
explain the failure of your AV sw.