Another possible false positive.
My recent "Full System Scan" has suddenly started detecting Trojan.Starter.GY on two system files.
The files are:
C:\i386\utilman.exe
c:\windows\system32\utilman.exe
In contrast to my post in the Trojan.Starter.IM thread, in this case the detection is only occurring on my WinXP Home Edition machine. The virus has not been detected in the utilman.exe files on my WinXP Media Center Edition machine.
One issue I have is that when I restore the files from quarantine, it creates new timestamps on the files. They look like they were created today. Is there any way to preserve the date/time of the original file when restoring from quarantine?
Thank you.