JimL said:
I wasn't looking at information for windows 2000. I was looking at
information for "shutdown.exe."
You were looking at both (even if that wasn't your initial intention).
Here's what I got when I ran a search on "shutdown.exe." Microsoft
Support says:
-----------------------
This article describes how to use the Remote Shutdown tool
(Shutdown.exe) to shut down and restart a local or remote Windows
2000-based or Microsoft Windows NT 4.0-based computer.
Shutdown.exe is available on the Microsoft Windows 2000 Resource Kit
CD-ROM only.
There is a context, though (shutting down and restarting a local or
remote Windows 2000-based or Microsoft Windows NT 4.0-based computer).
Clearly shutdown.exe *is* available elsewhere!
Whenever you do a Google search, you need to enter as many relevant
terms as possible. Otherwise, you will get a ton of hits and most will
not pertain to what you are interested in. Remember, you are not running
NT 4 or 2000, so the article you are referencing is irrelevant as far
you are concerned! Slip in Windows XP and restrict your hits to
Microsoft's site, and your hits might be more relevant:
http://www.google.com/search?hl=en&..."windows+xp"+site:microsoft.com&aq=f&oq=&aqi=
That says it is for the described use in 2000 and NT 4 and available
only on the 2000 CD. Since I don't have the 2000 CD I wondered why I
have shutdown.exe.
It is because it is part of Windows XP.
The hueristic and trace modules of my anti-virus
wondered the same thing and suggested I submit it for analysis.
What antivirus program? If you're AV program is flagging shutdown.exe as
suspicious, it is either a false positive or you might actually have an
infected file which happens to also be called shutdown.exe.
FWIW, this is the location of the legit system file:
C:\WINDOWS\system32
Finally, this page may be of interest:
http://www.threatexpert.com/files/shutdown.exe.html