Is this spyware or not?!

cjean · 10-31-2008, 09:50 AM

It's a new thing that is happening, and slowing my system substantially. Nearly every site I try to go to, this security window is popping up:

Quote:

Security Warning
The current Web page is trying to open a site in your Trusted sites list. Do you want to allow this?

Current site: [whichever I am on]
Trusted site: C:\WINDOWS\system32\xpsp3res.dll

yes(to allow) no(to deny)

Warning: allowing this can expose your computer to security risks. If you don't trust the current Web page choose no.

Why is every web page trying to open this file, and what is it? Do I have a virus or malware?

Banscare · 10-31-2008, 10:56 AM

"xpsp3res.dll (Service Pack 3 Messages) is a component from the software Microsoft� Windows� Operating System version 5.1.2586 by Microsoft Corporation. xpsp3res.dll version 5.1.2586 has a file size of 2,048 bytes, and is most commonly found under the directory "$NtUninstallKB890046$" with a creation date of September 7, 2005. This is not a known spyware, adware, or trojan component. Microsoft Windows is the most widely used PC operating system."

cjean · 10-31-2008, 11:29 AM

Yes, but why do I keep getting the security warning that "the current web page is trying to open a site in your Trusted Sites list"? I realize that xpsp3res.dll is not in itself a spyware program. Why is every other web page trying to open it?

tetonbob · 10-31-2008, 02:41 PM

Sounds to me like an issue with your Trusted Sites settings.

Ex Brit at McAfee support forums offered this to a user with a similar issue. It worked for that user.

http://forums.mcafeehelp.com/showpos...12&postcount=2

Quote:

Go to I.E. Tools/Internet Options/Security set all zones to default but particularly the Trusted Zones, uncheck the item shown in the attached picture and click Apply, then OK and see if that helps.

Chr1$ · 11-11-2008, 06:07 AM

Quote:

Originally Posted by cjean

Security Warning
The current Web page is trying to open a site in your Trusted sites list. Do you want to allow this?

Current site: [whichever I am on]
Trusted site: C:\WINDOWS\system32\xpsp3res.dll

yes(to allow) no(to deny)

Warning: allowing this can expose your computer to security risks. If you don't trust the current Web page choose no.

False positives. Unless microsoft is trying to infect you lol.

According to my Aviri yahoo.com is back-doored lol. So i uninstalled it.
False positives can occure when heuristic pick up patterns in scripts patterns that it sees as suspicious. Like funky javascript.

Anyway....

Code:

C:\WINDOWS\system32\xpsp3res.dll

Hmm looks suspicious possibly... couldn't tell you much not enough info you have submitted to go on.

tetonbob · 11-11-2008, 07:58 AM

Quote:

Originally Posted by Chr1$

Anyway....

Code:

C:\WINDOWS\system32\xpsp3res.dll

Hmm looks suspicious possibly... couldn't tell you much not enough info you have submitted to go on.

Look to your own machine.

I have several instances of this file on my machines, including one in system32

Chr1$ · 11-12-2008, 02:11 AM

Well of cource i have it to lol

but OMG

Quote:

Current site: [whichever I am on]
''Trusted site: C:\WINDOWS\system32\xpsp3res.dll''

Why the hell would it say that for a trusted site ? unless i'm reading what he put wrong. ???? Could anyone elaborate with real confirmation ?

10-31-2008, 10:56 AM	#2 (permalink)
Banscare Registered User Join Date: Jun 2008 Location: St John's NL Posts: 183 OS: XP Pro 64bit My System	Re: Is this spyware or not?! "xpsp3res.dll (Service Pack 3 Messages) is a component from the software Microsoft� Windows� Operating System version 5.1.2586 by Microsoft Corporation. xpsp3res.dll version 5.1.2586 has a file size of 2,048 bytes, and is most commonly found under the directory "$NtUninstallKB890046$" with a creation date of September 7, 2005. This is not a known spyware, adware, or trojan component. Microsoft Windows is the most widely used PC operating system." __________________ Ban Computer Support Specialist (MCP, MCSE)

10-31-2008, 11:29 AM	#3 (permalink)
cjean Registered User Join Date: Oct 2008 Posts: 2 OS: winxp	Re: Is this spyware or not?! Yes, but why do I keep getting the security warning that "the current web page is trying to open a site in your Trusted Sites list"? I realize that xpsp3res.dll is not in itself a spyware program. Why is every other web page trying to open it?