What is OWMngr.exe. and how do I get rid of it.

---

Request for Question Clarification by haversian-ga on 03 Jun 2003 09:03 PDT

Simply deleting it does not work?

What about removing it from the registry? (Start | Run | regedit.exe;
find: owmngr.exe; delete all keys which reference it)

Hi Seamus,

According to SpywareInfo.com, you've got yourself a spyware program,
which are not detected by anti-virus software:

"We have come accross the same problem. We have seen 3 trojan or
spyware programs so far, namely syslog.exe, OWMngr.exe and ttps.exe.
These all register theirselves in the registry and starts each time
the user login. They try to connect to tp.searchseekfind.com and
fastfind.org, and listens on different UDP ports."

SpywareInfo Support Forums
http://www.spywareinfo.com/forums/index.php?s=7dc0aa458d4c9bbc848f4e752b129235&act=ST&f=11&t=6286&st=0&#entry47617


To remove the spyware, I recommend Spybot Search & Destroy:

Spybot Search & Destroy
http://www.security.kolla.de/index.php?lang=en&page=news

There is a possibility that Spybot S&D might not be able to remove the
files, in which case you'll need to do it manually.  To determine
where the files related to this application reside on your hard drive,
use Hijack This:

Hijack This
http://www.tomcoyote.org/hjt/

Be certain to save a copy of your log, and always exercise extreme
caution when removing keys from your registry. A SpywareInfo user
reports:

"After searching for the program I found the startup call in the
registry under:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\run

deleting the entry from the registry seemed to solve the problem.
WARNING: becareful about deleting files from the registry. (Depending
on where the spyware is installing OWMngr.exe you may not find it
exactly as I have listed)"

SpywareInfo Support Forums
http://www.spywareinfo.com/forums/index.php?s=7dc0aa458d4c9bbc848f4e752b129235&act=ST&f=11&t=6286&st=0&#entry47617

Good luck!  If I can be of further assistance, please just ask for
clarification.  I'll be glad to help!

--Missy

Search terms:  [ owmngr.exe ]

---

Request for Answer Clarification by seamus96-ga on 03 Jun 2003 10:25 PDT

Thank you Missy - Iam not at my home computer. I am --well- terrified-
to go into registries etc as I know nothing about it. I tried to
delete the Files when
I went into search files.  It would not allow me to do that.

When I blocked per the Norton Message - my Outlook hotmail account
failed to log in.

---

Clarification of Answer by missy-ga on 03 Jun 2003 11:14 PDT

Don't feel bad - I've been building my own computers for five years,
and I still approach the Registry with great trepidation.  Even folks
with experience can make a hash of it if they aren't careful.

Just download SpyBot S&D (Patrick has really done a great job with
this program!) and run it according to instructions, and you ought to
be fine.  If it doesn't remove the program, use the Hijack This
utility.  We'll get you sorted out!

--Missy