How to tell if internat.exe is legit?

Discussion in 'malware problems & news' started by oma53, Jan 14, 2014.

Thread Status:
Not open for further replies.
  1. oma53

    oma53 Registered Member

    Joined:
    Mar 10, 2008
    Posts:
    87
    Hello,
    In my ZA firewall logs I see the following event for the OS firewall:
    SOFTWARE/MICROSOFT/WINDOWS/CURRENTVERSION/RUN internat.exe
    If I check for more info, I get the following:
    “Host Process for Windows Tasks is trying to delete a value in the registry”
    I have done a Google search, but most of the entries I see are old, 2002 – 2011.
    I can not find the “internat.exe" file on my system.
    I can not find the “SOFTWARE/MICROSOFT/WINDOWS/CURRENTVERSION/RUN internat.exe” in the registry.
    There is a legit MS file by this name, located in SYSTEM32 according to the threads I saw, but again, I do not have this file on my system.
    There are a lot of threads thru Google stating this was a bad virus/trojan a few years back, so now my question.
    How can I tell if this is legit or a virus/trojan.

    Win 7 Pro
    Current Updates applied
    I have ran the following:
    Microsoft Security Essentials
    MalwareBytes (free)
    MBAR
    Hitman Pro (paid)
    AVG Rescue CD
    Avira Rescue CD
    All have come up clean.

    Any suggestions would be greatly appreciated. (as you can tell, I am not that knowledgeable in this area)

    thank you.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.