Re: security warning box



Jeannie,

Definitely looks like a virus activity for me. Try Trend Micro's Sysclean package (free), it's capable of eliminating keyloggers, trojans etc. Full instructions at:

Generic Trojan / Adware Infestation Removal Procedure:
http://www.claymania.com/removal-trojan-adware.html

Trend Micro Sysclean package
http://aumha.net/viewtopic.php?t=10820

Once done, and maximum junk is eliminated by Trend Micro, follow the advice here:

The Parasite Fight - Quick Fix Protocol:
http://aumha.org/a/quickfix.php

--
Ramesh, Microsoft MVP
Windows XP Shell/User
http://windowsxp.mvps.org


"Jeannie" <Jeannie@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:54B82019-4576-47C8-AFA5-6F32970CEA2B@xxxxxxxxxxxxxxxx
Would appreciate some help here please.  Windows xp sp2

My daughter who uses msn messenger clicked on a link a friend had on
messenger and ran it. Now every time I log on (to any of the 4 accounts we
have on this computer) we get this every time.


open file - security warning box

Name - system.exe
Publisher - Unknown
Type - Application
From - C:\windows\System32

Run or Cancel

I have Norton Antivirus 2005 and noticed that it was disabled after my
daughter clicked on the link in her chat with her friend. I turned it back
on and re booted my machine. I checked my nortons and discovered that now
the live update was disabled. I fixed that then went to see if I needed any
updates from msn but could not because automatic update was disabled. I
fixed that and I have all available updates...none were needed.


I also went to Norton's on line virus and security check and they did a scan
and said I was clean and well protected. I have run Norton's live update and
got the latest virus definitions and ran my Norton's full scan and it came up
no viruses.


I also ran Ad-Aware and also came up clean.

Not sure what I should do next? I have re:booted several times....and every
time this security warning comes up as soon as you log on to any of the user
names. It only happens when you first log onto each identiity...you can
switch identities after and it doesnt re-appear. But does happen 4 times...1
for every identity.


Can I restore my computer to a past date ( like last Friday) to see if that
fixes it? or should I do that? If I should how is it done on xp?


Thanks for any advise.

Jeannie

.



Relevant Pages

  • Re: security warning box
    ... since Norton's says I am clean and so do therir on-line virus checker. ... > Once done, and maximum junk is eliminated by Trend Micro, follow the advice ... >> the live update was disabled. ... >> time this security warning comes up as soon as you log on to any of the ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Remote DoS attack against SSH Secure Shell for Windows Servers Vulnerability
    ... socket handles in an FD_SET structure are ... It's a fair bit more code, but very much worth it. ... Delivery co-sponsored by Trend Micro ... TREND MICRO REAL-TIME VIRUS ALERTS ...
    (NT-Bugtraq)
  • Re: NT 4.0 Security Roll-up and the issue of hotfixes
    ... The list of "25 patches above and beyond the SRP" is not really 25, ... three packages, installing the SRP, following 6 workarounds, and applying 3 ... Delivery co-sponsored by Trend Micro ... TREND MICRO REAL-TIME VIRUS ALERTS ...
    (NT-Bugtraq)
  • Code Red and August 1st
    ... Delivery co-sponsored by Trend Micro ... TREND MICRO REAL-TIME VIRUS ALERTS ... your Web site. ...
    (NT-Bugtraq)
  • Re: Secured IIS Project
    ... secure IIS 4.0 servers. ... The message will cause some anti-virus ... Delivery co-sponsored by Trend Micro ... TREND MICRO REAL-TIME VIRUS ALERTS ...
    (NT-Bugtraq)