Hi Folks, it seems to me the 2 files found are Temporary files: indicated by the ~ I like to delete any temporary files when cleaning a computer. ! mind you I have copies/backups of my systems so I can risk deleting the files. ? 'AV Resident Shield' is the AVG? Mike the mod @ PCTechTalk & vista_ & Win7 http://ca.groups.yahoo.com/group/vista_/ http://ca.groups.yahoo.com/group/Win7/ ******* REPLY SEPARATOR ********* On 8/22/2009 at 6:18 PM Steve Aiello wrote: Did a google on the WERfaf6.dir00 and came up with this site http://www.threatexpert.com/report.aspx?md5=e097b71eb1003293402a11fbb8f3d8b6 Google had 5 hits on this. 2 are in Chinese and 2 in Russian. The above the only one in English. It says something about first being reported in Feb. of 09. Hope G or Mike or one of the other guys can help Sorry but this is the best I can do right now. On Sat, Aug 22, 2009 at 9:31 AM, Sandi Beach <sandib2@xxxxxxxxx> wrote: > C:\DOCUME~1\Joyce\LOCALS~1\Temp\WERfaf6.dir00\Mini082209-01.dmp > > C:\DOCUME~1\Joyce\LOCALS~1\Temp\WERfaf6.dir00\sysdata.xml > > The above was reported in technical information following a popup saying > your system has recovered from a serious error. I did not send this to > Microsoft (never do). > At the same time Win Patrol popped up reporting a new startup which had no > identifying information. I declined to let it start up. > AV Resident Shield has been reporting an infection. Yesterday it seemed to > be in Weather Pulse so I quarantined the files, removed Weather Pulse, > deleted all remaining files concerning Weather Pulse and downloaded a new > WP > which is from Tropical Zones. In the process I noted that it said it was > correcting a bug (a false positive) so figured AV had reported that. > New Weather Pulse is working (old one had ceased to function after I > received the Resident Shield alert of an infection). > Last night I ran full scan with Malwarebytes and found nothing. But right > on top of the MB report was another report from AV that an infection had > been found by the Resident Shield concerning the files I copied and pasted > at the top of the screen. They are in quarantine for now. > I have not had to deal with virus infections for so long I have about > forgot > how! > Anything more I need to do about all this that just occurred last night? > Sandi --------------------------------------------------------------- Please remember to trim your replies (including this sentence and everything below it) and adjust the subject line as necessary. To subscribe, unsubscribe or modify your email settings: //www.freelists.org/webpage/pctechtalk OR To subscribe to the mailing list, send an email to pctechtalk-request@xxxxxxxxxxxxx with "subscribe" in the Subject. To unsubscribe send email to pctechtalk-request@xxxxxxxxxxxxx with "unsubscribe" in the Subject. To access our Archives: http://groups.yahoo.com/group/PCTechTalk/messages/ //www.freelists.org/archives/pctechtalk/ To contact only the PCTT Mod Squad, write to: pctechtalk-moderators@xxxxxxxxxxxxx To join our separate PCTableTalk off-topic group, send a blank email to: pctabletalk+subscribe@xxxxxxxxxxxxxxxx ---------------------------------------------------------------