View Full Version : Is 19917_up.exe a virus or not?

Peter Mundy
23-10-2005, 09:26 AM
Sunday, 23 October 2005 10:17:55:a.m.

Hi Folks,

Just ran my anti-virus software over my hard drive and it claimed a file
c:\windows\system32\19917_up.exe was suspicious and may be infected with a Sasser Worm. The file date is 4 May 2004.
I am running Win XP Home SP1.
I did a google search on the file name which came out with no result.

Can anyone help me to know whether this file is Ok or whether it should be removed?

Is there an internet link that can be used to check out which files are true "viruses/worms" etc and how reliable?

I am an intermediate user and am concerned that without advice I may delete something that should not be deleted?

Thanks for any guidance,

Peter M

Speedy Gonzales
23-10-2005, 09:43 AM
It isnt a windows file.

Post a hijackthis log here. And we'll see what else maybe nasty.


Unzip it first into its own folder. Then run it then copy and paste the log here.

23-10-2005, 09:47 AM
Many viruses use "morphing" techniques that change the file name on every infection.

The fact that you cannot find ANY mention of the file name on Google is an immediate warning that the file is likely to be suspicious, since its being reported as such..