Trojan??

[Techguy]

One of my users got this message and I saw it (I took this screenshot).
It may be funny, but I am wondering if its some known trojan or a trick?
This message is disaplyed after login..

Anyways, here is the message, just dont laugh too much.

http://www.helpfromtechs.com/temp/replaceuser.jpg

Run entry in the registry is: C:\Windows\repl.exe
Antivirus doesnt detect that prog (I tried a few), so is this someone just playing jokes with this guy or something more serious?

Let me know if someone heard about this...

------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.

[manunkind]

I just searched all my sites and found nothing about that.

Those error messages can be made in 2 seconds, so at first I thought it was joke. The part I'm unsure about is what's listed under the run key. I have no idea what that is!!

Wish I knew..

[Techguy]

well, I copied the file (repl.exe) to my test machine and ran it there... Just gives out this error message and writes a registry entry... Doesnt seem to do anything else... But I will run it again after restoring test system with registry monitor on...

------------------
Thank you for using Help From Techs Support Forums!
Please come again and remember to refer a friend to our site.

[HKEd]

Hmmm...sure looks like a joke message.

There is a legitimate repl.exe file associated with Peek&Poke (http://www.cwendell.net/files/peekpoke.htm).