netfxupdate.exe

[DanS]

Found this in
HKLM\Software\Microsoft\Windows\CurrentVersion\Run \"NetFxUp
date_v1.1.4322" "C:\WINNT\Microsoft.NET\Framework\v1.1.4322
\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID"

We're running W2K Pro SP4 with all the latest patches.
Does anyone know if this item is supposed to be there, or
is it evidence of an intrusion?

Thanks for any help!

[Joel Martinez]

well ... I've never seen that executable before, but poking around the
web it would seem that many other people think it's a trojan or
something (couldn't find anything official).

What does your AV say about it?

--
Joel Martinez
http://www.onetug.org - Orlando .NET User Group
http://www.codecube.net - blog

DanS wrote:

Found this in
HKLM\Software\Microsoft\Windows\CurrentVersion\Run \"NetFxUp
date_v1.1.4322" "C:\WINNT\Microsoft.NET\Framework\v1.1.4322
\netfxupdate.exe" 1 v1.1.4322 GAC + NI NID"

We're running W2K Pro SP4 with all the latest patches.
Does anyone know if this item is supposed to be there, or
is it evidence of an intrusion?

Thanks for any help!