Computing.Net > Forums > Security and Virus > Warning msg about MDI

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

Warning msg about MDI

Reply to Message Icon

Original Message
Name: paganbaby
Date: October 31, 2002 at 00:22:36 Pacific
Subject: Warning msg about MDI
OS: Windows XP Home
CPU/Ram: 2.1 ghz/ 128mb Ram
Comment:

Hey, I had a trojan horse called Noob 4 on my system and my software cleaned it out. I hope... Anyway, post clean-up, I was digging thru all my logs and in the event log there are two warning messages I'm kinda concerned about. They are entered at the same time. Says:
10/28
Source: WinMgmt
Event ID: 63

WARNING: A provider, WMIProv, has been registered in WMI namespace, Root\WMI, to use the LocalSystem account. This account is
privileged and the provider may cause a
security violation if it does not correctly impersonate user requests.

The other entry was for HiPerfCooker...v1.
Same day, same time, same everything:

At the expense of sounding really stupid, what the heck is this??? What do I about it?
Microsoft's website was no help at all.



Report Offensive Message For Removal


Response Number 1
Name: EC
Date: November 1, 2002 at 23:10:54 Pacific
Reply: (edit)

Stupid sounding error messages are hallmarks of hackers and crackers, etc.
A trojan? Are you sure you're rid of it?
Have you tried SWAT IT from www.lockdowncorp.com?


Report Offensive Follow Up For Removal

Response Number 2
Name: paganbaby
Date: November 2, 2002 at 22:22:07 Pacific
Reply: (edit)

Hey! Yeah, actually Swat-It found the trojan to start with. It says it's all cleaned up now. I'm thinking something is wrong here cause something or someone keeps turning my freakin' firewall off. That's strange, don't you think? I don't ever turn that sucker off, but now, every few days I'll notice that my firewall didn't come on when I started up Windows. It's kinda worrying me. Nobody has physical access to this computer other than myself. I can't figure out why anyone would want to hack into my computer, though. I'm just a lil ole nobody in the whole scheme of things, you know?

Is there any way I can tell for sure if I've been hacked? Any way I can stop it from happening again? Other than disconnecting my modem, I don't know what to do!


Report Offensive Follow Up For Removal







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software