Virus warning for SgkHelper.hta appears when you try to install the Microsoft Security Guidance Kit (867484)

SYMPTOMS

When you try to install the Microsoft Security Guidance Kit on a computer that is running an antivirus program, such as Norton AntiVirus, you may receive a warning message that is similar to the following:

Malicious script detected
High Risk
Your computer is halted and needs to do something about this script.
Object Windows Script Host Shell Object
Activity Run
File C:\DOCUME~1\ADM...\SgkHelper.hta

CAUSE

This issue occurs because the Security Guidance Kit uses SgkHelper.hta, an HTML Application (HTA). Some programs, such as Norton AntiVirus, may generate a warning message when an HTA file runs.

The SgkHelper.hta script determines whether the host computer has the required version of the Microsoft .NET Framework installed. The Security Guidance Kit requires the Microsoft .NET Framework 1.1. SgkHelper.hta also starts the Security Guidance Kit Setup program by running the Microsoft Security Guidance Kit.msi Windows Installer file.

RESOLUTION

To resolve this issue, let the SgkHelper.hta script run one time. This lets the Security Guidance Kit be installed successfully without affecting your other security settings for HTA files. To do this, follow these steps:

In the dialog box of the antivirus program that has stopped the SgkHelper.hta script from running, such as the Norton AntiVirus dialog box, click Allow the entire script once, and then click OK.
Follow the steps to complete the installation of the Security Guidance Kit.

WORKAROUND

To work around this issue, install the Security Guidance Kit manually. To do this, follow these steps:

In the dialog box of the antivirus program that has stopped the SgkHelper.hta script from running, such as the Norton AntiVirus dialog box, leave the Stop this script (recommended) default option selected, and then click OK.
Start Windows Explorer, and then locate the CD-ROM drive that contains the Security Guidance Kit CD.
If the .NET Framework 1.1 is not already installed on the computer, double-click Dotnetfx.exe to start the .NET Framework 1.1 Setup program.

Note To determine whether the .NET Framework 1.1 is installed, double-click Add or Remove Programs in Control Panel.
After the .NET Framework 1.1 is installed successfully, right-click Microsoft Security Guidance Kit.msi, and then click Install.
Follow the steps to complete the installation of the Security Guidance Kit.

MORE INFORMATION

For additional information about the Security Guidance Kit, visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?FamilyID=c3260bd0-2ebb-4496-ad07-7e9d55d0ef1f&displaylang=en

The third-party products that this article discusses are manufactured by companies that are independent of Microsoft. Microsoft makes no warranty, implied or otherwise, regarding the performance or reliability of these products.