Security Incidents mailing list archives

Re: strange software > winsupdater.exe


From: Harlan Carvey <keydet89 () yahoo com>
Date: Thu, 17 Mar 2005 03:02:50 -0800 (PST)

Mike,

If you refer back to the OP, you'll see that the name
of the Registry value created under the Run key is
"Microsoft Window Updater".  That doesn't rule your
finding out...in fact, you may very well be right. 
However, we won't know until the OP collects
supporting information to confirm/verify this...




------------------------------------------
Harlan Carvey, CISSP
"Windows Forensics and Incident Recovery"
http://www.windows-ir.com
http://windowsir.blogspot.com
------------------------------------------


Current thread: