spyware - wupdt file

i have this file in my C:\Windows emp folder wupdt.exe. i’ve tried to delete it in safe mode. i tried spybot, adware, hijackthis, spyhunter..everything. but i’m unable to delete it. i’ve scanned my hd for a virus. its clean.

i’ve googled, and its not helping me in deleting this.

any solutions?

Re: spyware - wupdt file

its a trojan
Norton says it detects this and gives removal instrustions on their page

this page is not loading at this time

PS: stop using IE man. Get firefox

Re: spyware - wupdt file

:smiley:

Re: spyware - wupdt file

More direct route:

Run Regedit, Navigate to the key:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

In the right pane, delete the values:

"Win Server Updt"="C:\%windir%\wupdt.exe"
"Win Server"="C:\%windir%\winserv.exe"

Re: spyware - wupdt file

If you cant delete a file like in this case:

Try this:

press CTRL+AL+DEL

then from on task manager, go to 'processes' tab.
- On the processes tab (start new process)
- search for 'explorer.exe' and END that process!

After that from the file menu in 'task manager' browse to the file and HIT delete.

[thumb=H]taskmgr1689_3085644.JPG[/thumb]

Once you are done, again from the same file menu, this time browse to
explorer.exe in Windows folder and

Always works for me!

Re: spyware - wupdt file

oh man, burn ur comp before it spreads.

Re: spyware - wupdt file

I have already checked the symantec page for this. they say its a trojan. BUT i don't have the registery entries they say i should remove.

Umar bhai: i don't have those registry entries.

Gizzy bhai...that didn't work either.

Re: spyware - wupdt file

boot with another drive, like a bootable floppy or CD, like the PEBuilder CD or the System commander CD (floppy boot may not work if your file system is NTFS), once booted in such a fashion you should be able to delete the file.
Or you can remove the drive and put in another PC as a slave and delete the file.

Re: spyware - wupdt file

DT, you say you have Norton and it didnt detect this during a full system scan?

The reg entries that Umar mentioned are in this link. This could also be a IE Plugin.

Follow the removal instructions there. But before you do that make sure IE is not running and open Task Manager and kill all unneccary processes.

PS: if you are using anything other than XP oir Win2K, you are a fool.

Re: spyware - wupdt file

no it didn’t. i DON’T have ANY of those registry entries.

PS: to assume that i wouldn’t be using XP/Win2K…you are a fool.

Re: spyware - wupdt file

I don’t know how much this link will help but its also called TROJ_IMISERV.A. I might be wrong, but this is what I have got, I had this on my comp too and I followed these steps to remove it. Ppl correct me if I am wrong.

Re: spyware - wupdt file

yeah PD, its the same virus, trend micro has their own generic name for it. But DT here says that those reg entries dont exist and that his anti-virus doesnt detect this trojan.

Re: spyware - wupdt file

Dude, can you run HijackThis and post the log here .... that might help us fix the problem.