system32 virus/spyware

[Alex]

Hi, i had a strange combination of a trojan/spyware problem on my computer,
and apprently it was the file C:\WINDOWS\system32\system32.exe

this sounds like an important system file, but according to PC CILLIN it was
infected and they were not able to clean or 'quarantine' it.

is this a real system file?

[Alex]

i used hijackthis to disable its autorun crap.
any help with identifying this thing would be great.
"Alex" <someone@there.net> wrote in message
news:S_gsb.23330$y95.8043@nwrdny01.gnilink.net...
> Hi, i had a strange combination of a trojan/spyware problem on my
computer,
> and apprently it was the file C:\WINDOWS\system32\system32.exe
>
> this sounds like an important system file, but according to PC CILLIN it
was
> infected and they were not able to clean or 'quarantine' it.
>
> is this a real system file?
>
>

[David Arnstein]

In article <S_gsb.23330$y95.8043@nwrdny01.gnilink.net>,
Alex <someone@there.net> wrote:
>Hi, i had a strange combination of a trojan/spyware problem on my computer,
>and apprently it was the file C:\WINDOWS\system32\system32.exe
>
>this sounds like an important system file, but according to PC CILLIN it was
>infected and they were not able to clean or 'quarantine' it.
>
>is this a real system file?

One data point here. I searched a Win98 installation and a Win2000
installation for system32.exe. I could find no file having this name.
--
David Arnstein Please do not look at laser with remaining eye
arnstein+usenet@pobox.com

[-=ô;ö=-]

Nor found in XP-Pro either...

You may wish to take a look at this page
http://www.viruslist.com/eng/index.h...=1001&id=59688


"David Arnstein" <arnstein@panix.com> wrote in message
news:bosc54$7rc$1@reader2.panix.com...
| In article <S_gsb.23330$y95.8043@nwrdny01.gnilink.net>,
| Alex <someone@there.net> wrote:
| >Hi, i had a strange combination of a trojan/spyware problem on my computer,
| >and apprently it was the file C:\WINDOWS\system32\system32.exe
| >
| >this sounds like an important system file, but according to PC CILLIN it was
| >infected and they were not able to clean or 'quarantine' it.
| >
| >is this a real system file?
|
| One data point here. I searched a Win98 installation and a Win2000
| installation for system32.exe. I could find no file having this name.
| --
| David Arnstein Please do not look at laser with remaining eye
| arnstein+usenet@pobox.com

[Alex]

thanks. it definitely is a virus. i deleted it and the spyware crap linking
to it with hijack this. great program.
"-=ô;ö=-" <Not.Telling@nowhere.com> wrote in message
news:0Oksb.22977$n6.9175@nwrddc03.gnilink.net...
> Nor found in XP-Pro either...
>
> You may wish to take a look at this page
> http://www.viruslist.com/eng/index.h...=1001&id=59688
>
>
> "David Arnstein" <arnstein@panix.com> wrote in message
> news:bosc54$7rc$1@reader2.panix.com...
> | In article <S_gsb.23330$y95.8043@nwrdny01.gnilink.net>,
> | Alex <someone@there.net> wrote:
> | >Hi, i had a strange combination of a trojan/spyware problem on my
computer,
> | >and apprently it was the file C:\WINDOWS\system32\system32.exe
> | >
> | >this sounds like an important system file, but according to PC CILLIN
it was
> | >infected and they were not able to clean or 'quarantine' it.
> | >
> | >is this a real system file?
> |
> | One data point here. I searched a Win98 installation and a Win2000
> | installation for system32.exe. I could find no file having this name.
> | --
> | David Arnstein Please do not look at laser with
remaining eye
> | arnstein+usenet@pobox.com
>
>