I have a user who is having items quarantined since the 10th by the startup scanner. I'm not sure if this is a legitimate threat or not and what steps to take. The first was that morning and Remote Administrator shows this
Operating memory » C:\Program Files\Common Files\microsoft shared\OFFICE14\MSPTLS.DLL
Threat a variant of Win32/Urlbot.NAG trojan
Action cleaned by deleting (after the next restart) - quarantined
This file no longer shows up as being quarantine, but every day since she has this file being quarantined:
Operating memory » C:\Program Files\Microsoft Office\Office14\OMSMAIN.DLL
Threat a variant of Win32/Urlbot.NAG trojan
Action cleaned by deleting (after the next restart) - quarantined
Thanks.