Multiple Programs – UMPNPMGR.DLL, UMPNPMGR.EXE

Umpnpmgr.dll is the user-mode Plug and Play Manager that installs with your Windows 2000/XP/2003 Operating System. Unless kept updated, this file could allow remote code execution on your system. You'll find more information at http://www.microsoft.com/technet/security/bulletin/ms05-047.mspx.

Umpnpmgr.exe and usbohci.sys install with ReactOS. ReactOS is an open source operating system providing a ground-up implementation of a Microsoft Windows XP compatible operating system. You'll find more information at http://www.reactos.org/en/index.html.

We also saw instances of umpnpmgr.exe and w32time.exe (Windows Time Service) that were infected with Downloader.Agnet.aam. You'll find more information at http://vil.nai.com/vil/content/v_133564.htm.

Safe

Microsoft