Upshifter Report post Posted December 28, 2010 When I boot the system I get a security window asking me if I want to run " C:\users\user64\appdata\roaming\winds.exe ". The security window says that it is "unsigned", and could be malware, or something. Search engines tell me this is a trojan trying to get in. I used the command prompt to see if I could find "winds.exe"; but I can't find it in the roaming directory. Is this a trojan, and how do I get rid of it? Thank you Share this post Link to post Share on other sites
Seth Report post Posted December 28, 2010 Did you update and run a complete scan with SAS? Share this post Link to post Share on other sites
Seth Report post Posted December 28, 2010 Addition to above: It may not be detected as it hasn't been installed. You can get rid of the message by disabling the entry in MSCONFIG's startup list. Share this post Link to post Share on other sites
Upshifter Report post Posted December 29, 2010 Seth, Thanks for the reply and the good advice. I did run an updated SAS, with a complete scan, as soon as I saw the security window. But, like you said, it wasn't installed, so there was nothing for SAS to find. I'm running windows 7 professional, 64 bit, on this system. Share this post Link to post Share on other sites
Seth Report post Posted December 29, 2010 You're welcome. The msconfig suggestion should take care of it. Share this post Link to post Share on other sites
