[susanwendy]

Everytime i turn on my work laptop at home, i get a window pop up on startup which looks like a Windows Security alert saying it has blocked the program COM Surrogate, publisher Microsoft Corporation. It never comes up when i am in the office. We have another laptop at home and we don't get it on that either. It asks if i want to Keep Blocking, Unblock or Ask me Later....I have been selecting Ask me Later until i know if it is legit or not: is this a legitimate patch from microsoft or a virus? advice appreciated...

[evilfantasy]

Download and rename HijackThis (HJT)

• Double-click on HJTInstall.
• Click on the Install button.
• It will automatically place HJT in C:\Program Files\TrendMicro\HijackThis\HijackThis.exe.
• Upon install, HijackThis should open for you.
  • Close HijackThis and rename it.
  • Go to C:\Program Files\Trend Micro\HijackThis.exe
  • Right click on HijackThis.exe and select Rename.
  • Type in sniper.exe and press Enter.
  • Right-click on sniper.exe and select Send To > Desktop (create shortcut)
• From the desktop open HiajckThis.
• If using Windows Vista, Right-click and Run As Administrator.
• Click on the Do a system scan and save a log file button
• HijackThis will scan and then a log will open in notepad.
• Copy and then paste the entire contents of the log in your post.
  • Do not have Hijackthis fix anything yet. Most of what it finds will be harmless or even required.

Although we have renamed HijackThis to sniper, we will still refer to it as HijackThis or HJT.