kill.exe

  • Thread starter Thread starter Lion
  • Start date Start date
L

Lion

Using Win2000 at home, no networking. I was accessing my
email through Outlook & my firewall (BlackIce) stopped a
file "C:\WINNT\SYSTEM32\SECURITY\BIN\kill.exe" from
executing & gave me the choice of "terminating"
or "continuing". I wasn't sure, so I terminated it. It
also appeared connected to a file "C:\WINNT\SYSTEM32
\cmd.exe". Terminating both didn't seem to affect
anything. Yesterday, I had a "critical" security
warning about an "echo reply without request" attempt
(whatever that is), so now I'm a little paranoid. Is
anyone familar with these & have any idea what they do?
 
echo request without reply could be a number of things, bad or not. One
such event is probably nothing.

kill.exe sounds bad. I would make sure your antivirus is up to date and
working. www.grisoft.com is free antivirus, or you can scan your computer
with a different free antivirus such as http://housecall.antivirus.com for a
second opinion. If nothing is found, see here:

http://securityadmin.info/faq.htm#hacked
http://securityadmin.info/faq.htm#re-secure
http://securityadmin.info/faq.htm#harden
 
There is no BUILT-IN kill.exe on Win2000;
there is a Kill.exe on the Reskit but it NEVER runs
UNLESS you run it manually (from command line)
or you schedule it which makes almost no sense.
 
Kill.exe is a program that kills tasks, part of the task
manager. for it to run without your first running the
task manager is not good., sound like someone may have
gotten access to your pc.
 
As far as I know, kill.exe is a part of task manager,
used to end processes remotely (through telnet services).
If you are using this pc without having it on a network,
I don't think you would need to have your telnet services
enabled.
I would probably disable this service.
 
Back
Top