"C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau

My prevx intrusion has detected my registry trying to be axcessed by listed below, this is being done any time i opem my browser or any man site and i am not sure what it is so i stop it ?? please advise.

Prevx prevented process IEXPLORE.EXE accessing the system registry

Process: IEXPLORE.EXE
Path: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
Pid: 3180
Parentprocess: EXPLORER.EXE
Parentpath: C:\WINDOWS\EXPLORER.EXE
Pid: 1900

tried registry key: \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\
Valuename: MSNAPPAU
Old Value: 0x
New Value: "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
Rights: 0x2
Operation: 0x2
Security Setting causing this alert: Registry Run-Key Protection


This event has been generated by a queried action which the user denied

PA
Mon Aug 02 12:57:38 CDT 2004

There are indications around that msnappau.exe is MSN's automatic updater,
an optional utility installed with MSN8 and MSN9. (MSN9.1 was just recently
released BTW.)
--
HTH - Please Reply to This Thread

~Robear Dyer (PA Bear)
MS MVP-Windows (IE/OE), AH-VSOP

AumHa Forums
http://forum.aumha.org

What You Should Know About Spyware
http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx

KW wrote:
> My prevx intrusion has detected my registry trying to be axcessed by
> listed below, this is being done any time i opem my browser or any man
> site and i am not sure what it is so i stop it ?? please advise.
>
> Prevx prevented process IEXPLORE.EXE accessing the system registry
>
> Process: IEXPLORE.EXE
> Path: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
> Pid: 3180
> Parentprocess: EXPLORER.EXE
> Parentpath: C:\WINDOWS\EXPLORER.EXE
> Pid: 1900
>
> tried registry key:
> \REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\
> Valuename: MSNAPPAU
> Old Value: 0x
> New Value: "C:\Program Files\MSN
> Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
> Rights: 0x2
> Operation: 0x2
> Security Setting causing this alert: Registry Run-Key Protection
>
>
> This event has been generated by a queried action which the user denied

JJK
Thu Aug 05 05:42:32 CDT 2004

From the discusion below I'm assumming that "msnappau" is
spyware and NOT an official MS product. My spyware
software identifies this each time I reboot (XP) and I
just delete it. Please confirm.

Thanks. Please reply to this thread.
JJK

>-----Original Message-----
>There are indications around that msnappau.exe is MSN's
automatic updater,
>an optional utility installed with MSN8 and MSN9.
(MSN9.1 was just recently
>released BTW.)
>--
>HTH - Please Reply to This Thread
>
>~Robear Dyer (PA Bear)
>MS MVP-Windows (IE/OE), AH-VSOP
>
>AumHa Forums
>http://forum.aumha.org
>
>What You Should Know About Spyware
>http://www.microsoft.com/mscorp/twc/privacy/spyware.mspx
>
>KW wrote:
>> My prevx intrusion has detected my registry trying to
be axcessed by
>> listed below, this is being done any time i opem my
browser or any man
>> site and i am not sure what it is so i stop it ??
please advise.
>>
>> Prevx prevented process IEXPLORE.EXE accessing the
system registry
>>
>> Process: IEXPLORE.EXE
>> Path: C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
>> Pid: 3180
>> Parentprocess: EXPLORER.EXE
>> Parentpath: C:\WINDOWS\EXPLORER.EXE
>> Pid: 1900
>>
>> tried registry key:
>>
\REGISTRY\MACHINE\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSIO
N\RUN\
>> Valuename: MSNAPPAU
>> Old Value: 0x
>> New Value: "C:\Program Files\MSN
>> Apps\Updater\01.02.0002.1001\en-us\msnappau.exe"
>> Rights: 0x2
>> Operation: 0x2
>> Security Setting causing this alert: Registry Run-Key
Protection
>>
>>
>> This event has been generated by a queried action
which the user denied
>
>.
>