Additionally, many forms of malware take on the name of a valid Windows
system file. If you find a similarly named file in another location - it is
a trojan, malware or virus.
--
Regards,
Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)
Quote from George Ankner:
If you knew as much as you think you know,
You would realize that you don't know what you thought you knew!
"Richard Urban" <> wrote in message
news:%23K5WIG$...
> Winload.exe is a part of the Vista RTM operating system. You will find two
> instances of it on your computer.
>
> One will be in C:\Windows\System32 and is 918k
>
> The other is in C:\Windows\System32\Boot and is 918k
>
> Both are dated Thursday, November 02, 2006, 07:42:32
>
> --
>
>
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
> (For email, remove the obvious from my address)
>
> Quote from George Ankner:
> If you knew as much as you think you know,
> You would realize that you don't know what you thought you knew!
>
>
>
> "Marinus" <> wrote in message
> news:9BFE8654-F9FB-44F4-A8A7-...
>> After installing RC 1 Vista, I noticed using XSOFTSPY that in
>> windows\system32\winload.EXE a Trojan is mentioned named tattletale. I
>> can
>> not remove it.
>>
>> I have understood that Tattletale is used for "parental control", i.e. a
>> keylogger that should be used by parents to "spy" their children. Easily
>> it
>> can be used for other usage as well. Xsoftsy call is a severe risk. (I
>> agree).
>>
>> My questions
>> 1: Is this a standard element of Vista? or have I installed it by
>> accident
>> separately?
>> 2: How can I remove this.
>>
>>
>>
>>
>>
>
|