Is this file safe?

[Paul]

Hi all, I'm just checking someone's Hijackthis
log, and there's 2 entries in it saying:

C:\WINDOWS\system32\autoexec.exe

and

O23 - Service: lsass (Workstations) - Unknown owner -
C:\WINDOWS\system32\autoexec.exe

Is this autoexec.exe a valid file in XP Pro??

I know autoexec.nt exists, but does autoexec.exe?

Or are they are the same file?

Could someone let me know

Thanx

 

[Vanguard]

Hi all, I'm just checking someone's Hijackthis
log, and there's 2 entries in it saying:

C:\WINDOWS\system32\autoexec.exe

and

O23 - Service: lsass (Workstations) - Unknown owner -
C:\WINDOWS\system32\autoexec.exe

Is this autoexec.exe a valid file in XP Pro??

I know autoexec.nt exists, but does autoexec.exe?

Or are they are the same file?

Just a little Google searching and I found:

http://www.bleepingcomputer.com/startups/autoexec.exe-13399.html

..bat files are text files that need an interpreter to run the commands
listed therein. .exe files are compiled programs.

 

[ANONYMOUS]

Only Autoexec.nt exists in that particular folder. .exe indicates some
malware. I would rename it and scan the system.

hth

 

[Charlie Tame]

I have both XP Pro and 2003 Server installed on this machine and neither has
an EXE file of that name as part of the OS, however it is not impossible for
it to be legitimate - just maybe unlikely.

If you can't find a reference to it you could try renaming it and see if
anything breaks. That is not 100% safe of course but is safer than deleting
it...

Charlie

 

[Paul]

Thanx guys, I'll let the guy know!

Cheers

Thanx for the link Vanguard!

I have both XP Pro and 2003 Server installed on this machine and neither has
an EXE file of that name as part of the OS, however it is not impossible for
it to be legitimate - just maybe unlikely.

If you can't find a reference to it you could try renaming it and see if
anything breaks. That is not 100% safe of course but is safer than deleting
it...

Charlie

 

[Steve N.]

Thanx guys, I'll let the guy know!

Cheers

Thanx for the link Vanguard!

Also search the registry for any references to "autoexec.exe" and delete
them.

Steve N.

 

[Paul]

K.

Well I told him to boot in safe mode
and delete it!

Thanx guys, I'll let the guy know!

Cheers

Thanx for the link Vanguard!

Also search the registry for any references to "autoexec.exe" and delete
them.

Steve N.

 

[David Candy]

Why don't you have a punchup over who gave the best advice.

 

[Steve N.]

K.

Well I told him to boot in safe mode
and delete it!

But if there's a registry entry that is trying to run that file it will
produce error(s) when it can't find the file.

Steve N.

 

[Steve N.]

Why don't you have a punchup over who gave the best advice.

LOL! No thanks. I was not trying to one-up him, just adding to the
advice he gave.

Steve N.