Re: Scary message in Event Viewer
From: Mike Thoma (mthoma_at_shaw.ca)
Date: 05/08/03
- Next message: Brendan Perez: "Unwanted popups!"
- Previous message: LostOne: "ATTN: Roger Abell [MVP] Re: Microsoft Security Bulletin MS03-017 - 817787"
- In reply to: Peter: "Re: Scary message in Event Viewer"
- Next in thread: Mike Thoma: "Re: Scary message in Event Viewer"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 08 May 2003 14:09:25 -0700
Thanks.
Peter wrote:
> It looks like its part of MS Office see:
> http://www.micos-sw.cz/img/sw1.txt
>
> Peter
>
>>-----Original Message-----
>>Thanks Roger, but "most likely OK" is less than
>
> completely reassuring. I
>
>>understand what you are saying, but I'd like to know for
>
> sure that
>
>>OffProv is a legitimate program.
>>
>>I guess my real question is: is OffProv.exe part of
>
> Office or not? If
>
>>not, does anyone know what it is?
>>
>>Roger Abell [MVP] wrote:
>>
>>>This is normal, and you are most likely OK (there is a
>>>chance someone has modified the file, etc. but I have
>>>not heard of such a trojan existing).
>>>This is an informational message, from the WMI system,
>>>letting you know that some software has been registered
>>>as a provider (of repository extension) with WMI.
>>
> Since
>
>>>such providers run with high priv, WMI gives you this
>>>informative message.
>>>
>>
>>.
>>
>
- Next message: Brendan Perez: "Unwanted popups!"
- Previous message: LostOne: "ATTN: Roger Abell [MVP] Re: Microsoft Security Bulletin MS03-017 - 817787"
- In reply to: Peter: "Re: Scary message in Event Viewer"
- Next in thread: Mike Thoma: "Re: Scary message in Event Viewer"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|