Remove SnapDo.EXE Trojan Artemis!D2FEF9FCC355 identified in SnapDo.exe by Macafee. It says it is currently a shared program and cannot remove it until shared status is revoked. I cannot find program by searching for it on Windows 7 nor by manual search Program is :DeviceHardDiskVolumeShadowCopy35\Users\Tedscribe\Application Data\Local\Smartbbar\Application\SnapDo.exe Help would be appreciated,

Use iobit uninstaller to do this.

The process "winlogon.exe" runs in the background.

Winlogon is a part of the Windows Login subsystem, and is necessary for user authorization and Windows activation checks. http://www.neuber.com/taskmanager/proces...

Note: The winlogon.exe file is located in the folder C:\Windows\System32. In other cases, winlogon.exe is a virus, spyware, trojan or worm! Check this with Security Task Manager."

Microsoft designed Windows so many small applications perform their tasks without a user knowing about it.

Normally, this will run smoothly and without flaw, but every once in a while, an issue can come up.

Winlogon.exe is an application that runs on start-up, and its primary function is to monitor the use of other applications.

Winlogon.exe typically only runs for about a minute or two when Windows first boots up, so if for some reason it is still running five or 10 minutes later, it could be infected.

Spyware and other malware would infect this application because it can manipulate other programs in Windows, causing problems.

If this is the case, the file might need to be removed.

if you want to remove this from

Open "My Computer" and select the "C:" drive.

Double click the "Windows" folder, then select "System 32." Navigate through the System 32 folder until you find "Winlogon.exe."

Click the "Winlogon.exe" file and hit "Delete." Select "Yes" when asked if you're sure you want to remove the program.

hope this helps

As this could be spyware, try to run the http://live.sysinternals.com/ and run the procexp.exe to see a more detailed task manager...

dssagent.exe is a virus, trojan, spyware, adware which you can remove, or a file belonging to a Windows system or an application you can trust.

ssagent.exe is located in a subfolder of C:\Windows. Known file sizes on Windows XP are 546,304 bytes (72% of all occurrence), 590,336 bytes, 69,162 bytes, 510,976 bytes.
File dssagent.exe is not a Windows core file. Program starts when Windows starts (see Registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run). The program has no visible window. It is located in the Windows folder, but it is not a Windows core file.

This trojan runs as a rootkit, so you won't see it when it's running. It is a single file in C:\Users\username\AppData\Local (Vista), or C:\Documents and Settings\username\Local Settings\AppData (XP), It is marked as a system file, so you'll need to use the Folder Options in the control panel, to unhide hidden and system files and folders. As I said, with the rootkit loaded, you still won't see it there until you unload it. It runs by changing the registry so that any .exe run, will instead load the trojan. Attempts to run Internet Explorer or Mozilla Firefox will also instead run it. If you delete the file, or your antivirus finds it and deletes it, the changes to the registry will mean that from then on, whenever you try to run a program, you'll get a windows message asking you to select the file you want to use to open the .exe. (if this is the case, you'll need to use regedit in safe mode with command prompt, or rename regedit.exe to regedit.com).

To defeat the trojan, you must undo the registry changes, then reboot to reveal the file, then delete it. Here's how.

Run regedit. The trojan will load and give you all the fake warnings hassle. Do Ctrl-Alt_Del, and find the process 'av.exe'. End the process. Now in the registry editor, search for 'av.exe'. You should find a section HKEY_CLASSES_ROOT\.exe, where the (Default) REG_SZ has been set to 'secfile'. Edit this back to 'exefile'. Keep searching and you'll find HKEY_CLASSES_ROOT\secfile. Delete the whole secfile section. Keep searching - you'll find the odd line where it may be a recently 'searched for' item, where you can just delete the line, and you'll find it in a command line to run Internet Explorer. The full path to the trojan will be specified before the path to Internet Explorer. Edit this line to remove the path to the trojan, leaving just the path to Internet Explorer. A similar edit may be required for Mozilla Firefox. Find any other occurences of av.exe and deal with them in the same way.

Now, reboot the PC, and the trojan will not start up. Display system and hidden files, then go to the location of the trojan. Now you can see the little swine. Delete it, and empty the recycle bin.

Problem solved.

Enjoy!

issas exe - Dangerous issas exe Issas exe is Trojan/Backdoor.
Kill the file issas exe and remove issas exe from Windows startup. Please go to this link and install malwarebytes and scan your computer immediatly
http://dw.com.com/redir?edId=3&siteId=4&oId=3000-8022_4-10804572&ontId=8022_4&spi=9eb255f4d72b83d30cbad9ffbbea1c8e&lop=link&tag=tdw_dltext&ltype=dl_dlnow&pid=11102549&mfgId=6290020&merId=6290020&pguid=Cgh5OwoPjF8AAB47TdwAAAC1&destUrl=http%3A%2F%2Fdownload.cnet.com%2F3001-8022_4-10804572.html%3Fspi%3D9eb255f4d72b83d30cbad9ffbbea1c8e%26part%3Ddl-10804572

Then get AVAST Antivirus and run a boot time scan..Avast is free and can be downloaded here
http://files.avast.com/iavs4pro/setupeng.exe

Cause and Solution to Secure Clock Error

First thing you need to do is open up your task manager by clicking control alt delete.

Select the tab "processes." In the process tab you will see a list of programs that are currently running, if you locate a file called csrss.exe it could be a trojan virus that is blocking your subscription music from communicating with your computer properly. It also effects a lot other things including hardware, personal information, security, etc. but for this post we will keep it specificly on the secure clock error. This csrss.exe trojan/virus causes your computer's internal system to not function correctly including the secure clock.

NOW WAIT! There are two different csrss.exe files, a good one and a bad/trojan one. All windows computers have a csrss.exe file on them and this "good" csrss.exe file is need in order for your computer to run propertly so don't do anything with it until you determine if you have the "good" one or the "bad" one.

You must first determine whether the csrss.exe file that is running on your computer is the "good" one that ships with the computer (inside your systems32 folder) or whether you have the trojan/virus csrss.exe file infecting your computer and secure clock.

Since the systems32 program and the Trojan/virus are both name csrss.exe you must run a quick test to see if you have the bad one or the good one or both.

First locate all fo the csrss.exe files inside your "processes" tab inside task manager (you may have more then one). The way to tell if you have the trojan or "bad" csrss.exe is by right clicking on it and selecting "end task." If you have the "good" one then you should get a windows pop up message. If you you get the windows pop up message, do NOT "end" the task, just ex out or cancel out of it. You do not want to end the "good" csrss.exe file because it is needed in order for your computer to work properly. If you "end task" on the good csrss.exe file then your computer will instantly crash (since it is needed to run).

If when you right click on the csrss.exe file and select "end task" you do NOT get a windows pop up then you may very likely have the csrss.exe trojan virus. In addition to the right click test you may want to simply look at where this file is located. If it is in your systems folder it is the good one, if it is anywhere else it is propably the bad one.

The trojan/virsu version of this csrss.exe file interferes with many of the communication hardware,drivers, software, security, etc., including rhapsody and will prompt this secure clock error message.

The only way to remove this csrss.exe trojan is to perform a system recovery on your computer returning your computer back to the original manufacturers settings. There is no way to clean, delete or remove this file trojan, you must perform a complete clean of your system by doing a system recover.

If you cannont determine whether your csrss.exe file are good one or bad ones simply back up your files and software and do a system recovery anyway, your rhapsody and mp3 player will then work fine.

Hello,

you can try to remove the viru with malwarebytes and unlocker
http://www.malwarebytes.org/mbam.php and http://www.softpedia.com/get/System/System-Miscellaneous/Unlocker.shtml

Thanks

Do a virus scan and then remove the virus/trojan

If your saying as soon as you turned on the new pc this trojan warning appeared i would take it back
let me know

download "protector pro" this software erase all internet history etc etc. i already tried