mchain Posted August 13, 2012 Running XP Pro SP3, SAS Free v. 5.5.1012, Database Version 9045 (current Monday 8/13/2012). Attached find last scan, DB version 9044 8/10/2012 below: (I discovered I cannot upload file, so pasted below) Question re these two files? Can I safely remove these installed folders inside WINDOWS/Resources/Themes concerning these two installer files found elsewhere on the Desktop? Would this completely remove any possible threat? Other folders/installed programs are there/would want to remove all except for the original Windows installed Themes. OK to remove manually? I inherited this system from someone else. Cannot find this sort of program/theme in Add/Remove. Does not exist. Second Topic: Possible security issue for me (or for the forum as well). I have not visited here for some time, and apparently the user account password no longer worked. I went and got a new password and USED the CAPTCHA feature to complete password reset. On the first attempt, I completed only ONE of the two requested CAPTCHA words, and accidently clicked "enter" before I was done. CAPTCHA request still went through. I checked email account, and the new password was there waiting for me. I did this a second time, this time correctly, and got a second new password. Have not tried or used the second password yet. Currently logged in here using the first new password provided. Is this right or expected? Or? Log: SUPERAntiSpyware Scan Log https://www.superantispyware.com Generated 08/13/2012 at 09:55 AM Application Version : 5.5.1012 Core Rules Database Version : 9044 Trace Rules Database Version: 6856 Scan type : Quick Scan Total Scan Time : 00:06:34 Operating System Information Windows XP Professional 32-bit, Service Pack 3 (Build 5.01.2600) Limited User Memory items scanned : 463 Memory threats detected : 0 Registry items scanned : 29767 Registry threats detected : 0 File items scanned : 7347 File threats detected : 2 Trojan.Agent/Gen-Small C:\DOCUMENTS AND SETTINGS\USER\DESKTOP\PERSONAL STUFF\DOWNLOADS\BLUE_XP.EXE C:\DOCUMENTS AND SETTINGS\USER\DESKTOP\PERSONAL STUFF\DOWNLOADS\CARAMEL_XP.EXE Share this post Link to post Share on other sites
SAS Customer Service Posted August 13, 2012 SUPERAntiSpyware will detect and remove all of the related malicious files, you will not need to do anything additional except click the Remove Threats button. If that is all that was detected, that is all that was determined to be a threat. You can read about how reCAPTCHA works here: http://www.google.com/recaptcha/learnmore Share this post Link to post Share on other sites