Dino17
2007-06-25, 22:50
SpyBot is doing it's stuff, but i keep getting this 'attack' ...
23/06/2007 16:32:02 Denied value "load" (new data: "C:\WINDOWS\system32\gixbvlp\services.exe") changed in NT startup!
23/06/2007 17:47:16 Denied value "run" (new data: "C:\WINDOWS\system32\gixbvlp\services.exe") changed in NT startup!
I killed the .exe and the folder on the grounds any legitimate installation would moan and I could then fix it, but all I get is the Spybot warning that it's trying to modify the registry. AV is Symantec and it's bang up to date. Last nasty I caught was C:\WINDOWS\retadpu32.exe which was due to one of the kids downloading a bogus MS Messenger install, but I'm reasonably confident that that's now 100% killed off.
Anyone else seen this and know what it is ?
Cheers,
Dino.
23/06/2007 16:32:02 Denied value "load" (new data: "C:\WINDOWS\system32\gixbvlp\services.exe") changed in NT startup!
23/06/2007 17:47:16 Denied value "run" (new data: "C:\WINDOWS\system32\gixbvlp\services.exe") changed in NT startup!
I killed the .exe and the folder on the grounds any legitimate installation would moan and I could then fix it, but all I get is the Spybot warning that it's trying to modify the registry. AV is Symantec and it's bang up to date. Last nasty I caught was C:\WINDOWS\retadpu32.exe which was due to one of the kids downloading a bogus MS Messenger install, but I'm reasonably confident that that's now 100% killed off.
Anyone else seen this and know what it is ?
Cheers,
Dino.