Strange file?

  • Thread starter Thread starter Dan
  • Start date Start date
D

Dan

Anybody knows what this file is?

Winnt\system32\sysswin32.exe??
winnt\system32\winguard32.exe??

Antivirus says there virus, and cant delete them, and when I open the
winnt\system32 folder, theyre not there

Any ideas?

Dan
 
Go to Tools>Folder Options. Then, on the View tab of this window, select
"Show Hidden Files and Folders". I'm sure what these files do, but you may
able to delete them yourself if you want to, using this method. You may want
to do a little research before you modify files like this.

Stan
 
Hi Dan

The Winguard32.exe file may be a variant of Winguard.exe as mentioned in the
following report from Symantec.
http://securityresponse.symantec.com/avcenter/venc/data/w32.southpark.worm.html

The Syswin32 file definitely sounds like one of the viruses mentioned below:
http://securityresponse.symantec.com/avcenter/venc/data/backdoor.irccontact.html

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.sdbot.html

See if following their recommendations resolves your issue.

--
Hope this helps,
Mike Rosado
Windows 2000 MCSE + MCDBA
Microsoft Enterprise Platform Support
Windows NT/2000/2003 Cluster Technologies

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
<http://www.microsoft.com/info/cpyright.htm>

-----Original Message-----
 
Thanks all for you help, finally found out those files were part of a
virus, and after letting my AV try to remove it and failed, I found the
files, deleteted them and erased the register keys, wich by the way
were about 8!


Dan
 
Back
Top