Hi,

My guess is that this file was download (usually not by choice) while one of
administrators was browsing the internet.

Scan every user's Temporary Internet files on this computer, you might find
infected files.

Mike

"serge calderara" <sergecalderara@discussions.microsoft.com> wrote in
message news:6C2D01B9-8364-416E-BEC9-8D7A2F2F6AA2@microsoft.com...
> Dear all,
>
> We are running windows 2000 professional office PC and the WINNT folder
and
> child folder have full rights for administrator only.
> I mean that only administrators can write and delete files in there..
>
> Recently we have been infected by a virus call wowex32[1].exe, which is
> generated random exe file inside %SYSTEM% variable
>
> Is there a secure way to protect my system files agains that kind of
viruses?
> How was it possible that a file was created in SYSTEM folder as only
> administrators have access and password is not blank ????
>
> Thanks for your answer
>
> Regards
> serge