Running an NT4 Server and F-Prot has just flagged this up as a trojan.

I've STFW and not found much apart from a site in Dutch with the title "IIS Hacking", which got me rather worried!

Does anyone know what exactly it is, what it does and what I should do with it?

Thanks!

 

Sure it's not a typo - winmgmt.exe?

 

I have a WinMgmt.exe running on my PC here (W2000 Pro, SP2)

It's clean AFAIK.

 

Its something to do with Windows Management Instrumentation (WMI)

Best bet would be to find the file in the service packs, starting with the latest and work your way back until you find it. Extract it and compare the sizes.

FYI my XP Pro sp1 Winmgmt.exe is 13,312 bytes in size.

H

 

Upload it to Webimmune

 

Thanks Jack, comes back as inconclusive. Have to see what the boffins make of it!

It's definately winmgnt.exe and it has the extended properties you get with dos programs in Windows, and no icon.