NIS 2012 v 19.8.0.14
Vista Home Premium 32 bit
Vista SP 2
IE 8 browser
First let me say I know that a statistical submission means that something has just sparked curiosity and does not mean it's an infection.
That said I have seen two statistical submissions over the last few days that have me curious
Both are located in Windows/System32/
mshtml.dll
IEFRAME.DLL
I have scanned the file with NIS and they are clean.
Neither of them SHOW A SIGNATURE from Microsoft
when I go to Windows/System32 and look at the files they both show as:
Modified 8/25/12
created on 9/21/12 at 3:42pm
\Accessed on 9/21/12 at 3:42pm
I did search for Microsoft updates around that time, I downloaded the updates, BUT DID NOT INSTALL UNTIL LATER, like 4 hours later
mshtml.dll is 5.73 MB
IEFRAME.DLL is 10.5 MB
Since these are not signed, I'm wondering if they are legit?
Also since they show created and accessed hours before I installed, I'm also concerned about that
Any help is appreciated.
Thanks