Virus Alert – SYSMGR.EXE

Sysmgr.exe installs with the the Rbot.FL worm. You may see this file described as "Microsoft System Checkup". This is not a Microsoft file. This worm spreads across weakly protected networks. It can allow a remote user to access your system via an IRC channel. This remote user can download, install, run or delete files. The worm can terminate antivirus programs and can modify your Windows Hosts file.

We'd recommend removing this file using WinPatrol. First, go to your Active Tasks tab and kill the file there. Next, go to your Startup Programs and remove the file there. We'd also recommend a full system scan with an up to date antivirus program.

Additional background information on this worm can be found at http://uk.trendmicro-europe.com/enterprise/security_info/ve_detail.php?Vname=WORM_RBOT.FL.

Virus

Remove