Unsolved

This post is more than 5 years old

1 Message

2401

May 2nd, 2004 13:00

Microsoft.exe - Can Someone Please Tell Me What This Is??!!

There is a file named Microsoft.exe located in the C:\WINDOWS\SYSTEM32 directory on my computer. Can someone please tell me what it is and what it does?

Details: I was performing a windows update in an attempt to correct a virus problem. In the process, the McAfee firewall software detected Microsoft.exe attempting to connect to the Internet and asked me if I wished to allow it. I chose yes at which point the update files began to download.

Since then I have noticed periods of extreme performance degradation. The task manager reveals that Microsoft.exe is consuming up to 45% of the CPU. I took a look at it (Microsoft.exe) and it says the file was created on 4/30/2004! That's a bit odd for a file in the system directory. Needless to say I am a bit leery of the legitimacy of this file. I have renamed the file temporarily so that it will not run.

Something else worth noting is that I have done another update with this file renamed and the update went smoothly! So I am a bit confused - it doesn't appear that Microsoft.exe is needed for updates. So what is it?

If you have any information that may be of some help, please pass it on. Thanks in advance.

Bill

2 Intern

 • 

11.9K Posts

May 2nd, 2004 13:00



@mrbill2004 wrote:

There is a file named Microsoft.exe located in the C:\WINDOWS\SYSTEM32 directory on my computer. Can someone please tell me what it is and what it does?

Details: I was performing a windows update in an attempt to correct a virus problem. In the process, the McAfee firewall software detected Microsoft.exe attempting to connect to the Internet and asked me if I wished to allow it. I chose yes at which point the update files began to download.

Since then I have noticed periods of extreme performance degradation. The task manager reveals that Microsoft.exe is consuming up to 45% of the CPU. I took a look at it (Microsoft.exe) and it says the file was created on 4/30/2004! That's a bit odd for a file in the system directory. Needless to say I am a bit leery of the legitimacy of this file. I have renamed the file temporarily so that it will not run.

Something else worth noting is that I have done another update with this file renamed and the update went smoothly! So I am a bit confused - it doesn't appear that Microsoft.exe is needed for updates. So what is it?

If you have any information that may be of some help, please pass it on. Thanks in advance.

Bill

Quick search shows this possibility of a worm - http://securityresponse.symantec.com/avcenter/venc/data/w32.hllw.gaobot.jb.html

No Events found!

Top