Hi Barrie, It's a known Trojan OK, but how it got there is anyone's guess. It certainly would NOT have come from Microsoft. George. > -----Original Message----- > From: access-uk@xxxxxxxxxxxxx > [mailto:access-uk@xxxxxxxxxxxxx] On Behalf Of Barrie Moxon > Sent: 24 January 2005 17:25 > To: access-uk@xxxxxxxxxxxxx > Subject: [access-uk] about torgan horse > > hi folks. > can any one tell me about. > C:WINDOWS\systen32\Tools\Restart.exe > avg found it today and said it was a torgan horse and then deleted it. > the only programs I have downloaded is the service pack for > Microsoft office I installed it last night. > all the best. > barrie > > > barrie.moxon@xxxxxxxxxxxx > > > > -- > No virus found in this outgoing message. > Checked by AVG Anti-Virus. > Version: 7.0.302 / Virus Database: 265.7.3 - Release Date: 24/01/2005 > > ** To leave the list, click on the immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe] > ** If this link doesn't work then send a message to: > ** access-uk-request@xxxxxxxxxxxxx > ** and in the Subject line type > ** unsubscribe > ** For other list commands such as vacation mode, click on the > ** immediately-following link:- > ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq] > ** or send a message, to > ** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq > > This Message has been scanned for viruses by McAfee Groupshield. ** To leave the list, click on the immediately-following link:- ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=unsubscribe] ** If this link doesn't work then send a message to: ** access-uk-request@xxxxxxxxxxxxx ** and in the Subject line type ** unsubscribe ** For other list commands such as vacation mode, click on the ** immediately-following link:- ** [mailto:access-uk-request@xxxxxxxxxxxxx?subject=faq] ** or send a message, to ** access-uk-request@xxxxxxxxxxxxx with the Subject:- faq