Every time I, or any other user of this computer, log on to my/their area I get a warning sound. The original log-on screen then freezes. To escape the freeze I have to ctrl-alt-del and this takes me to my desktop. However, I then get a warning box saying that the file 'mssvcnes.exe' could not be found and that if I want to execute it use the Search function.

What is this file and why am I getting this automatic messages when I haven't even tried to execute the file?

Thanks.

I found this forum where someone reports the same problem.

http://www.softwaretipsandtricks.com/forum/showthread.php?p=81957

It appears to be a virus, so update your anit virus definitions, boot windows in safe mode, then run your anti virus software in safe mode.

If it doesn't detect the virus, just search for the file and delete it.

Hi, yeah I found that forum by doing a google and it didn't seem particularly clear. I have located the file and it's in Windows/Prefetch. Don't know what that means.

I have done a spyware scan and am currently in the process of a full Norton scan.

I have tried manually deleting the file but the problem persists.

Thanks for your reply.

If it cannot be found, try removing it from your startup.

Start> Run> regedit

Delete every key called mssvcnes.exe in the following:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnceEx
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnceEx
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServices
HKCU\Software\Microsoft\Windows\CurrentVersion\RunServicesOnce
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Run
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows\Load

Then restart your computer and the message should be gone.

Thanks but I accessed the registry and none of these entries contained the file so there was nothing to delete.

I'll try rebooting in safe mode and trying everything again.

Thanks for your time.

I didn't post this before because the registry keys are the proper way to remove something from startup.

But, you can go to:

Start> Run> msconfig> Startup> uncheck the file if its there. Then reboot.