Sophos virus analysis: Troj/Krepper-Z:
http://www.sophos.com/virusinfo/anal...jkrepperz.html

- - - - -

The following registry entries are created to run Troj/Krepper-Z on startup:
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows
run
<Windows>\inet20003\services.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
xp_system
<Windows>\inet20003\services.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
xp_system
<Windows>\inet20003\services.exe
- - - - -

--
Ramesh, Microsoft MVP
Windows XP Shell/User

Windows XP Troubleshooting
http://www.winhelponline.com


"PoliceCruiser" <PoliceCruiser@discussions.microsoft.com> wrote in message
newsAD6FC8A-29B2-4845-8589-3EE3816ABC88@microsoft.com...
Recently invaded by malware. After cleaning I get the above message. When I
click ok start getting trojan and spyware which are blocked, cleaned and
deleted by PC-cillin