Results 1 to 2 of 2

Thread: Is Advapi process in XP a virus?

  1. #1
    vinfriend Guest

    Default Is Advapi process in XP a virus?

    I see the following error in Windows XP security log each time I logon. Can you please tell me if Advapi process a virus and if so how to remove it? I use Zone Alarm 5.5 with latest virus updates.
    Event Type:
    Failure Audit
    Event Source:
    Security
    Event Category:
    Logon/Logoff
    Event ID:
    529
    Date:

    5/13/2007
    Time:

    1:22:20 PM
    User:

    NT AUTHORITY\SYSTEM
    Description:
    Logon Failure:


    Reason:

    Unknown user name or bad password


    User Name:
    Techman


    Logon Type:
    2


    Logon Process:
    Advapi



    Authentication Package:
    Negotiate




    Operating System:Windows XP Pro
    Product Name:ZoneAlarm Antivirus
    Software Version:5.x

  2. #2
    Join Date
    Dec 2005
    Posts
    9,056

    Default Re: Is Advapi process in XP a virus?

    No this is legitimate. If there was an advapi.exe on the PC, then there would be a virus/troajn. But this advapi is part of the message that is normally seen.....

    http://www.motobit.com/help/scptutl/cm123.htm


    The best way to de-bug the events in the Event Viewer for the Errors is by clicking the Properties of the Errors in the Event Viewer, then check out the info displayed. The Event ID number is very helpful. In your case, the Event ID: 529 means the Event ID number is 529.......


    http://www.eventid.net/display.asp?e...ource=Security

    explains a little and provides various links to check things out.

    If you are still worried about a trojan/virus, then scan the PC with the ZA AV in the safe mode. Plus do some on-line scans to verify the ZA AV scan.

    Use the Internet Explorer since the on-line scans require activeX and be sure to disable the ZA AV before doing any actual additional AV scans...

    http://www.bitdefender.com/scan8/ie.html

    http://www.ewido.net/en/onlinescan/

    http://us.mcafee.com/root/mfs/default.asp

    You may consider some freeware scanners...

    http://www.superantispyware.com/

    http://www.emsisoft.com/en/software/free/

    Cheers.
    Oldsod
    Best regards.
    oldsod

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •