What Files Are These?

[MAH]

My antivirus software keeps trying to block these files
from accessing the internet:

c:\windows\system32\winst.exe
c:\windows\sysupd.exe
c:\windows\system32\wbem\wmiprvse.exe
c:\windows\system32\terrabyte.exe

Are these bad files? Or, are necessary for my computer?
Should I block them, or, give them access?

Thanks!

 

[Carey Frisch [MVP]]

Download Ad-Aware 6.0 and scan your PC for spyware:
http://download.com.com/3000-2144-10045910.html?part=69274&subj=dlpage&tag=button

Symantec Security Check
http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Virus Removal Tools
http://securityresponse.symantec.com/avcenter/tools.list.html

Online Virus Removal Tutorials
http://www.symantec.com/techsupp/virusremoval/virusremoval_info_tutorial.html

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User

Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/

-----------------------------------------------------------------------------------

|
| My antivirus software keeps trying to block these files
| from accessing the internet:
|
| c:\windows\system32\winst.exe
| c:\windows\sysupd.exe
| c:\windows\system32\wbem\wmiprvse.exe
| c:\windows\system32\terrabyte.exe
|
| Are these bad files? Or, are necessary for my computer?
| Should I block them, or, give them access?
|
| Thanks!
|
|

 

[Rick \Nutcase\ Rogers]

Hi,

c:\windows\system32\winst.exe

Driver file, but shouldn't be accessing the 'net unless it's involved in
checking for updates.

c:\windows\sysupd.exe

Possibly legit, but more likely a trojan, see:
http://www.faqfarm.com/Computer/Virus/22690

c:\windows\system32\wbem\wmiprvse.exe

WMI file, legit - but no idea why it wants to access the 'net.

c:\windows\system32\terrabyte.exe

Suspicious as well, I can't anything on this - I wouldn't trust it.

--
Best of Luck,

Rick Rogers aka "Nutcase" MS-MVP - Windows
Windows isn't rocket science! That's my other hobby!

Associate Expert - WinXP - Expert Zone