Security Incidents mailing list archives
Re: strange software > winsupdater.exe
From: Harlan Carvey <keydet89 () yahoo com>
Date: Thu, 17 Mar 2005 03:02:50 -0800 (PST)
Mike, If you refer back to the OP, you'll see that the name of the Registry value created under the Run key is "Microsoft Window Updater". That doesn't rule your finding out...in fact, you may very well be right. However, we won't know until the OP collects supporting information to confirm/verify this... ------------------------------------------ Harlan Carvey, CISSP "Windows Forensics and Incident Recovery" http://www.windows-ir.com http://windowsir.blogspot.com ------------------------------------------
Current thread:
- RE: Pubstro rash, (continued)
- RE: Pubstro rash David Gillett (Mar 18)
- Re: strange software > winsupdater.exe Mike Barushok (Mar 16)
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 16)
- RE: strange software > winsupdater.exe Jim Harrison (ISA) (Mar 16)
- RE: strange software > winsupdater.exe Harlan Carvey (Mar 16)
- Re: strange software > winsupdater.exe dave_mikesch (Mar 16)
- RE: strange software > winsupdater.exe Jim Harrison (ISA) (Mar 16)
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 17)
- Re: strange software > winsupdater.exe Valdis . Kletnieks (Mar 17)
- Re: strange software > winsupdater.exe Nick FitzGerald (Mar 17)
- Re: strange software > winsupdater.exe Valdis . Kletnieks (Mar 17)
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 17)
- Re: strange software > winsupdater.exe k levinson (Mar 17)
- Re: strange software > winsupdater.exe Harlan Carvey (Mar 28)
- Administrivia: Re: strange software > winsupdater.exe Daniel Hanson (Mar 28)