Go Back   Velocity Reviews > Newsgroups > Computer Security
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply

Computer Security - mstask.exe replaced?

 
Thread Tools Search this Thread
Old 07-18-2004, 11:50 PM   #1
Default mstask.exe replaced?


I think it has happened twice. The first time Norton firewall was reporting
that mstask.exe was trying to access the internet. NotePad.exe was as well.
I killed notepad with no problem but ended up disabling mstask in the
registry and the deleting the suspicous files.
This time the process could not be stopped, the files could not be deleted.
I booted off the recovery cd, then removed the suspicious files. Anyone else
seeing this?

Thanks,
Andy




Andy Smith
  Reply With Quote
Old 07-19-2004, 06:40 PM   #2
Julie Larson
 
Posts: n/a
Default Re: mstask.exe replaced?
"Andy Smith" <> wrote in message news:<t2DKc.457$>...
> I think it has happened twice. The first time Norton firewall was reporting
> that mstask.exe was trying to access the internet. NotePad.exe was as well.
> I killed notepad with no problem but ended up disabling mstask in the
> registry and the deleting the suspicous files.
> This time the process could not be stopped, the files could not be deleted.
> I booted off the recovery cd, then removed the suspicious files. Anyone else
> seeing this?
>
> Thanks,
> Andy


Yes, today on my machine, the firewall blocked Notepad.exe which
wanted to access the internet? Is this a new bug? McAfee Virus Scan
has nothing to say about it.


Julie Larson
  Reply With Quote
Old 07-20-2004, 02:34 PM   #3
Andy Smith
 
Posts: n/a
Default Re: mstask.exe replaced?

"Julie Larson" <> wrote in message
news: om...
> "Andy Smith" <> wrote in message

news:<t2DKc.457$>...
> > I think it has happened twice. The first time Norton firewall was

reporting
> > that mstask.exe was trying to access the internet. NotePad.exe was as

well.
> > I killed notepad with no problem but ended up disabling mstask in the
> > registry and the deleting the suspicous files.
> > This time the process could not be stopped, the files could not be

deleted.
> > I booted off the recovery cd, then removed the suspicious files. Anyone

else
> > seeing this?
> >
> > Thanks,
> > Andy

>
> Yes, today on my machine, the firewall blocked Notepad.exe which
> wanted to access the internet? Is this a new bug? McAfee Virus Scan
> has nothing to say about it.


Norton anti-virus did not detect that Notepad had been replaced or that
mstask.exe had been replaced either. I believe these are trojans.




Andy Smith
  Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Will exams 70-528 and 70-536 be replaced soon? Marc MCTS 6 06-24-2008 12:17 PM
Help: getting a fox dvd replaced fawdown@excite.com DVD Video 3 06-24-2007 04:01 AM
Re: Is A+ replaced by A+ 2003 Patrick Michael A+ Certification 1 04-15-2004 08:17 PM
Clint Kennedy: coward or loser? Pikoro A+ Certification 9 08-28-2003 05:20 AM
Re: Server+ Certification - worth? Pikoro A+ Certification 36 08-25-2003 05:42 AM




SEO by vBSEO 3.3.2 ©2009, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46