What triggered this event, is it a virus?

At 5:08 am this morning, I got an unknown Application event logged in my
event viewer.

-----------------------------------------------------------------------------------------------------
Event Type: Information
Event Source: crypt32
Event Category: None
Event ID: 7
Date: 11/2/2004
Time: 5:08:08 AM
User: N/A
Computer: VERGENTBERTHA
Description:
Successful auto update retrieval of third-party root list sequence number
from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

-----------------------------------------------------------------------------------------------------

Though the address appears to be to Microsoft, my Automatic update is
disabled. Other than visiting some generic web pages, I haven't run
anything that was called crypt32, or installed any new software or drivers.

What triggered this crypt32?

_____
Brian.

Additional,

WinXP, SP2, latest updates installed.

____________
Brian Guralnick


"Brian Guralnick" <vergent.tech@sympatico.ca> wrote in message
news:%23cTqNqNwEHA.1512@TK2MSFTNGP12.phx.gbl...
> At 5:08 am this morning, I got an unknown Application event logged in my
> event viewer.
>
> -----------------------------------------------------------------------------------------------------
> Event Type: Information
> Event Source: crypt32
> Event Category: None
> Event ID: 7
> Date: 11/2/2004
> Time: 5:08:08 AM
> User: N/A
> Computer: VERGENTBERTHA
> Description:
> Successful auto update retrieval of third-party root list sequence number
> from:
> <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
>
> -----------------------------------------------------------------------------------------------------
>
> Though the address appears to be to Microsoft, my Automatic update is
> disabled. Other than visiting some generic web pages, I haven't run
> anything that was called crypt32, or installed any new software or
> drivers.
>
> What triggered this crypt32?
>
> _____
> Brian.
>
>

"Brian Guralnick" <vergent.tech@sympatico.ca> wrote in message
news:%23cTqNqNwEHA.1512@TK2MSFTNGP12.phx.gbl
>
> At 5:08 am this morning, I got an unknown Application event logged in
> my event viewer.
>
> Though the address appears to be to Microsoft, my Automatic update is
> disabled. Other than visiting some generic web pages, I haven't run
> anything that was called crypt32, or installed any new software or
> drivers.

Were you browsing secure web pages (https) at the time? That might do it.

--
Robin Walker
rdhw@cam.ac.uk

Thanks, so you are saying that 'crypt32' is a trusted M$ app. Right?

--
____________
Brian Guralnick


"Robin Walker" <rdhw@cam.ac.uk> wrote in message
news:cm8434$gk7$1@gemini.csx.cam.ac.uk...
> "Brian Guralnick" <vergent.tech@sympatico.ca> wrote in message
> news:%23cTqNqNwEHA.1512@TK2MSFTNGP12.phx.gbl
>>
>> At 5:08 am this morning, I got an unknown Application event logged in
>> my event viewer.
>>
>> Though the address appears to be to Microsoft, my Automatic update is
>> disabled. Other than visiting some generic web pages, I haven't run
>> anything that was called crypt32, or installed any new software or
>> drivers.
>
> Were you browsing secure web pages (https) at the time? That might do it.
>
> --
> Robin Walker
> rdhw@cam.ac.uk
>

Read this:
http://www.processlibrary.com/directory/files/crypt32/

--
--------
Paul
--------
www.paulsxp.com
www.paulsxp.com/forums


"Brian Guralnick" <vergent.tech@sympatico.ca> wrote in message
news:O6DqW$TwEHA.1524@TK2MSFTNGP09.phx.gbl...
> Thanks, so you are saying that 'crypt32' is a trusted M$ app. Right?
>
> --
> ____________
> Brian Guralnick
>
>
> "Robin Walker" <rdhw@cam.ac.uk> wrote in message
> news:cm8434$gk7$1@gemini.csx.cam.ac.uk...
>> "Brian Guralnick" <vergent.tech@sympatico.ca> wrote in message
>> news:%23cTqNqNwEHA.1512@TK2MSFTNGP12.phx.gbl
>>>
>>> At 5:08 am this morning, I got an unknown Application event logged in
>>> my event viewer.
>>>
>>> Though the address appears to be to Microsoft, my Automatic update is
>>> disabled. Other than visiting some generic web pages, I haven't run
>>> anything that was called crypt32, or installed any new software or
>>> drivers.
>>
>> Were you browsing secure web pages (https) at the time? That might do
>> it.
>>
>> --
>> Robin Walker
>> rdhw@cam.ac.uk
>>
>
>