winmgnt.exe - trojan?
15 October 2002, 04:19 PM
#1
Scooby Regular
Thread Starter
Join Date: Oct 2000
Posts: 368
Likes: 0
Received 0 Likes
on
0 Posts
Running an NT4 Server and F-Prot has just flagged this up as a trojan.
I've STFW and not found much apart from a site in Dutch with the title "IIS Hacking", which got me rather worried!
Does anyone know what exactly it is, what it does and what I should do with it?
Thanks!
I've STFW and not found much apart from a site in Dutch with the title "IIS Hacking", which got me rather worried!
Does anyone know what exactly it is, what it does and what I should do with it?
Thanks!
15 October 2002, 05:43 PM
#4
Scooby Regular
Join Date: Nov 2001
Posts: 2,576
Likes: 0
Received 0 Likes
on
0 Posts
Its something to do with Windows Management Instrumentation (WMI)
Best bet would be to find the file in the service packs, starting with the latest and work your way back until you find it. Extract it and compare the sizes.
FYI my XP Pro sp1 Winmgmt.exe is 13,312 bytes in size.
H
Best bet would be to find the file in the service packs, starting with the latest and work your way back until you find it. Extract it and compare the sizes.
FYI my XP Pro sp1 Winmgmt.exe is 13,312 bytes in size.
H
15 October 2002, 09:57 PM
#6
Scooby Regular
Thread Starter
Join Date: Oct 2000
Posts: 368
Likes: 0
Received 0 Likes
on
0 Posts
Thanks Jack, comes back as inconclusive. Have to see what the boffins make of it! 
It's definately winmgnt.exe and it has the extended properties you get with dos programs in Windows, and no icon.
It's definately winmgnt.exe and it has the extended properties you get with dos programs in Windows, and no icon.
Thread
Thread Starter
Forum
Replies
Last Post
Shropshire-Guy
Computer & Technology Related
16
30 December 2004 01:25 PM