One, and only one, of my client's computer's get's a pop-up every 10 minutes stating there is virus activity on their computer. Closing the waning box always opens an Internet Explorer window which simulates a scan. The window purports to be from secure-components.com. This window is always followed by a notice from Norton AV 2008 referring to Trojan.Malscript!html. The history screen usually shows a file, Promo3.html, has been removed from one of several folders in %user%\Local Settings\Temporary Internet Files\Content.ie5. Norton's advice is to stop System Restore, Run Liveupdate, Run a full scan, and restart System Restore. I have done that and the malware continues to appear. I have run Ad Aware (2008) which submitted a suspicious file, C:\Windows\pp09.exe, and SpyBot S&D which found nothing.
Somewhere there must be a root compenent that keeps opening the secure-componets.com screen that Norton AV does not catch. Please help me remove it.
HighJackThis log attached.