i have this file in my C:\Windows emp folder wupdt.exe. i’ve tried to delete it in safe mode. i tried spybot, adware, hijackthis, spyhunter..everything. but i’m unable to delete it. i’ve scanned my hd for a virus. its clean.
i’ve googled, and its not helping me in deleting this.
any solutions?
5Abi
April 24, 2005, 12:49pm
2
Re: spyware - wupdt file
its a trojan
Norton says it detects this and gives removal instrustions on their page
Symantec security research centers around the world provide unparalleled analysis of and protection from IT security threats that include malware, security risks, vulnerabilities, and spam.
this page is not loading at this time
PS: stop using IE man. Get firefox
Re: spyware - wupdt file
More direct route:
Run Regedit, Navigate to the key:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
In the right pane, delete the values:
"Win Server Updt"="C:\%windir%\wupdt.exe"
"Win Server"="C:\%windir%\winserv.exe"
Gizzy
April 24, 2005, 9:23pm
5
Re: spyware - wupdt file
If you cant delete a file like in this case:
Try this:
press CTRL+AL+DEL
then from on task manager, go to 'processes' tab.
- On the processes tab (start new process)
- search for 'explorer.exe' and END that process!
After that from the file menu in 'task manager' browse to the file and HIT delete.
[thumb=H]taskmgr1689_3085644.JPG[/thumb]
Once you are done, again from the same file menu, this time browse to
explorer.exe in Windows folder and
Always works for me!
Re: spyware - wupdt file
oh man, burn ur comp before it spreads.
Re: spyware - wupdt file
I have already checked the symantec page for this. they say its a trojan. BUT i don't have the registery entries they say i should remove.
Umar bhai: i don't have those registry entries.
Gizzy bhai...that didn't work either.
Re: spyware - wupdt file
boot with another drive, like a bootable floppy or CD, like the PEBuilder CD or the System commander CD (floppy boot may not work if your file system is NTFS), once booted in such a fashion you should be able to delete the file.
Or you can remove the drive and put in another PC as a slave and delete the file.
5Abi
April 25, 2005, 12:44pm
9
Re: spyware - wupdt file
DT, you say you have Norton and it didnt detect this during a full system scan?
The reg entries that Umar mentioned are in this link. This could also be a IE Plugin.
Symantec security research centers around the world provide unparalleled analysis of and protection from IT security threats that include malware, security risks, vulnerabilities, and spam.
Follow the removal instructions there. But before you do that make sure IE is not running and open Task Manager and kill all unneccary processes.
PS: if you are using anything other than XP oir Win2K, you are a fool.
Re: spyware - wupdt file
5Abi:
DT, you say you have Norton and it didnt detect this during a full system scan?
The reg entries that Umar mentioned are in this link. This could also be a IE Plugin.
http://securityresponse.symantec.com/avcenter/venc/data/adware.ieplugin.html
Follow the removal instructions there. But before you do that make sure IE is not running and open Task Manager and kill all unneccary processes.
PS: if you are using anything other than XP oir Win2K, you are a fool.
no it didn’t. i DON’T have ANY of those registry entries.
PS: to assume that i wouldn’t be using XP/Win2K…you are a fool.
Re: spyware - wupdt file
I don’t know how much this link will help but its also called TROJ_IMISERV.A. I might be wrong, but this is what I have got, I had this on my comp too and I followed these steps to remove it. Ppl correct me if I am wrong.
5Abi
April 25, 2005, 2:15pm
12
Re: spyware - wupdt file
yeah PD, its the same virus, trend micro has their own generic name for it. But DT here says that those reg entries dont exist and that his anti-virus doesnt detect this trojan.
nos
April 26, 2005, 10:49am
13
Re: spyware - wupdt file
Dude, can you run HijackThis and post the log here .... that might help us fix the problem.