Why do I get this alert when a person is doing a simple seach across mapped drives? Ive done a full system scan on the machine and nothing comes up.
This is signature 3750. I don;t get this trigger on my test machines. This could be a false positive specific to your environment and you need to refer to the advanced details for the event to determine if an exception is in order.
Conversely, you can apply the MS06-015 security update and safely disable this siganture.