6.3 version file found in Win7 System32

[Windows i7 920]

Something very strange I saw today... an alert came up on someone's PC. When I checked it for them it was a firewall block message. The program blocked was an exe in System32, and when I checked its properties, it was definitely a Windows file... but its version was 6.3.9600. Anyone have any ideas how this happened? I advised the person to have sfc /scannow run.

 

[Slartybart]

A while ago, there were a few Windows Updates (WU) that were versioned 6.3

I think these are the KBs from the May Tuesday drop that have the 6.3.9600
edit: added links
http://support.microsoft.com/kb/2798162
http://support.microsoft.com/kb/2919355
http://support.microsoft.com/kb/2926765
http://support.microsoft.com/kb/2952664

There was also a Flash update around that time, Adobe and MS were coordinating a for fix a security hole. This might have been the firewall alert.

There was one I recall that was associated with preparation for a Win8 upgrade (the same way SURT was on Vista)

I'm writing this from memory, so it's more of a "point you in the direction", than a definite explanation.

Review the installed updates from the May Tuesday drop - there aren't too many updates.

 

[Layback Bear]

I found this.

Windows 8.1 Pro Final (6.3.9600)

I think their were some KB's that was installed so one could upgrade to Windows 8 easier.

 

[Windows i7 920]

Thanks guys. I just wanted to be sure, as it seemed unusual to me.

 

[Slartybart]

Thanks guys. I just wanted to be sure, as it seemed unusual to me.

Everyone thought it was unusual, there are articles about MS confusing Win7 users.

Still, it should be verified that it was the May (or June) Patch Tuesday updates that put 6.3.9600 versions on that machine.

Bill
.