Re: What Files Are These?

From: Rick \ (rick_at_mvps.org)
Date: 05/26/04 

Date: Tue, 25 May 2004 22:24:41 -0400

Hi,

> c:\windows\system32\winst.exe

Driver file, but shouldn't be accessing the 'net unless it's involved in
checking for updates.

> c:\windows\sysupd.exe

Possibly legit, but more likely a trojan, see:
http://www.faqfarm.com/Computer/Virus/22690

> c:\windows\system32\wbem\wmiprvse.exe

WMI file, legit - but no idea why it wants to access the 'net.

> c:\windows\system32\terrabyte.exe

Suspicious as well, I can't anything on this - I wouldn't trust it. 

-- 
Best of Luck,
Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science!  That's my other hobby!
http://mvp.support.microsoft.com/
Associate Expert - WinXP - Expert Zone
www.microsoft.com/windowsxp/expertzone
Win98 Help - www.rickrogers.org
"MAH" <anonymous@discussions.microsoft.com> wrote in message 
news:1280501c442c6$c6593770$a101280a@phx.gbl...
>
> My antivirus software keeps trying to block these files
> from accessing the internet:
>
> c:\windows\system32\winst.exe
> c:\windows\sysupd.exe
> c:\windows\system32\wbem\wmiprvse.exe
> c:\windows\system32\terrabyte.exe
>
> Are these bad files? Or, are necessary for my computer?
> Should I block them, or, give them access?
>
> Thanks!
>
>
Loading