A couple of times I have received a message from ZoneAlarm that 'NsWrtProc
Microsoft Base Clase Application' wants to access the internet and it relates
to a file called WrtProc.exe which has another file called WrtMon.exe
associated with it. As there is a spelling mistake in the file description I
am suspicious of it.
Both files are located in C:\Windows\System32\spool\drivers
Both files were created on 18/10/2007 but modified about one year earlier,
which does not make sense, although other files in this directory were also
modified before they were created!!!!!!!!!!
Are they genuine Microsoft files, or are they malware?
If the latter then how do I remove them from Vista Home Premium which does
not allow me to delete them, even though I have Administrator privileges?
All suggestions appreciated as searching on Google has not been any help.