ScoobyNet.com - Subaru Enthusiast Forum - winmgnt.exe

ScoobyNet.com - Subaru Enthusiast Forum (https://www.scoobynet.com/)

- Computer & Technology Related (https://www.scoobynet.com/computer-and-technology-related-34/)

- - winmgnt.exe - trojan? (https://www.scoobynet.com/computer-and-technology-related-34/141173-winmgnt-exe-trojan.html)

AdrianFRST

15 October 2002 04:19 PM

Running an NT4 Server and F-Prot has just flagged this up as a trojan.

I've STFW and not found much apart from a site in Dutch with the title "IIS Hacking", which got me rather worried!

Does anyone know what exactly it is, what it does and what I should do with it?

Thanks!

chiark

15 October 2002 04:27 PM

Sure it's not a typo - winmgmt.exe?

ChrisB

15 October 2002 04:51 PM

I have a WinMgmt.exe running on my PC here (W2000 Pro, SP2)

It's clean AFAIK.

HHxx	15 October 2002 05:43 PM

Its something to do with Windows Management Instrumentation (WMI)

Best bet would be to find the file in the service packs, starting with the latest and work your way back until you find it. Extract it and compare the sizes.

FYI my XP Pro sp1 Winmgmt.exe is 13,312 bytes in size.

H

JackClark

15 October 2002 07:15 PM

Upload it to Webimmune

AdrianFRST

15 October 2002 09:57 PM

Thanks Jack, comes back as inconclusive. Have to see what the boffins make of it! ;)

It's definately winmgnt.exe and it has the extended properties you get with dos programs in Windows, and no icon.

All times are GMT +1. The time now is 04:36 AM.