HI allJust had to do system restore due to attack - I turned off PC everything was OKWhen I rebooted my account was cloned (or similar) and redirected linkk in Explorer meant it appeared as if all the user docs and desktop had gone - although they had not and were still there, progs could not see the dirs so nothing worked properlyAfter checking policeis and security certs it looked like a new system restore point was created and then the rights and certs were changed so that when I rebooted I got the new settings (although a call to perform boot was run whilst I was still on PC it apparently had ot worked)After restoring system to settings from 48 hours ago everything seems okThere was an exploit in XP that forced new rights onto and admin account which mad it non-admin, and then removed the capability to put admin rights back onot your accountHas anyone encountered this or similar and know what protocol was used to attck so I can block it ?

Hi Farenheight451, regarding the security related issue, I suggest you try a free online virus scan on the following site first: http://safety.live.com Meanwhile, if you need more help with virus-related issues, please contact Microsoft Product Support Services. For support within the United States and Canada, call toll-free (866) PCSAFETY (727-2338). For support outside the United States and Canada, visit the Product Support Services Web page (http://support.microsoft.com/?pr=SecurityHome ). Hope this helps!Sean Zhu - MSFT

Thanks for that I had (and still do) Norton Internet security 2009 installed - also had Defender on and live care scanner installed also (though messenger not running) Can only assume the attacker, if it was one (and not just a system error which i doubt), was using a known protocol mimicking one that is allowed by Norton The history had several entries (100+) for unsuccessful attacks over the three hours I was online that night. I assumed it was finally successful lol thanks