Re: w32com.exe
From: Michel Gallant (MVP) (neutron@istar.ca)
Date: 12/19/02
- Next message: Jerry Bryant [MSFT]: "Re: Email Attachments in OE"
- Previous message: George Hester: "Re: w32com.exe"
- In reply to: George Hester: "Re: w32com.exe"
- Next in thread: Strykar: "Re: w32com.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 18 Dec 2002 20:03:32 -0500 From: "Michel Gallant (MVP)" <neutron@istar.ca>
Here is a tool to enumerate all the registry key named-values (for Run, RunOnce etc..):
http://pages.istar.ca/~neutron/RunKeyValues
(note that the signing certificate is self-signed, since my usual Thawte code-signing cert has
expired).
- Michel Gallant
MVP Security
JavaScience Consulting
http://pages.istar.ca/~neutron
George Hester wrote:
> Well check out HKLM\Software\Microsoft\Windows\CurrentVersion\Run for a string called TaskReg and data w32com.exe. That's where it is being called. Online AV fighters will tell you you have a Backdoor Trojan. At least http://www.antivirus.com will.
>
> --
> George Hester
> __________________________________
> "mariuszgib" <member@dbforums.com> wrote in message news:2298350.1040251542@dbforums.com...
> >
> > No, I have never installed GNU or any other related software. Also I
> > don't have any of Sun products and I'm only installing software I really
> > need. And this guy - w32.com.exe - suddenly appeard in my system. Hope
> > it doesn't make any bad things. Anyway I will let you know if I find
> > something,
> >
> > Thanks,
> > Mariusz
> >
> >
> > Originally posted by George Hester
> > > I wish I could Mariusz. All I can gather is that it may be a
> > > reult of =
> > > GNU Software. Do you have any of that installed? Have you
> > > ever tried =
> > > to install any Sun products like the Web Services Toolkit?
> > >
> > > --=20
> > > George Hester
> > > __________________________________
> > > "mariuszgib" wrote in message =
> > > news:2294690.1040219845@dbforums.com"]news:2294690.1040219845@d-
> > > bforums.com[/url]...
> > > >=20
> > > > Hi George,
> > > >=20
> > > > Just a few days ago I saw w32com.exe on the list of background
> > > =
> > > processes
> > > > in my Task Manager. I don't know what it is and where it came
> > > from. I
> > > > looked at google as well, but there is just one entry in
> > > italian. I =
> > > also
> > > > tried AVs, but no joy.
> > > >=20
> > > > If you find out more please let me know.
> > > >=20
> > > > Thanks,
> > > > Mariusz
> > > > Poland
> > > >=20
> > > > --
> > > Posted via
> > http://dbforums.com/http://dbforums.com
> >
> >
> > --
> > Posted via http://dbforums.com
- Next message: Jerry Bryant [MSFT]: "Re: Email Attachments in OE"
- Previous message: George Hester: "Re: w32com.exe"
- In reply to: George Hester: "Re: w32com.exe"
- Next in thread: Strykar: "Re: w32com.exe"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
