Home All Groups Group Topic Archive Search About

Is winsupdater.exe virus or adware?

Author
22 Mar 2005 5:51 AM
harrycatcjf
I found winsupdater.exe in the taskmanager,and it automatically  execute  in
the startup.When i  disabled it in the startup option,but i still
automatically execute.Even I can not install the anti-adware .How can i fix
it?I search it in Google,and nothing is valuable.And the computer is very
slow.
Any suggestion is appreciated.

Author
22 Mar 2005 8:47 AM
Rob
Its a variant of this virus/worm :

http://us.mcafee.com/virusInfo/default.asp?id=alphar&SearchType=2&SearchString=w32/sdbot.worm

I would remove these keys and delete the file........ it supposedly deletes
a real windows file
during install, yet I do not know which one.................. a lot of these
can recreate themselves
which makes them nasty totally remove..................

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
MicroSoft Window Updater=winsupdater.exe

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices\]
MicroSoft Window Updater=winsupdater.exe

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\]
MicroSoft Window Updater=winsupdater.exe

Here are a couple of online forum threads you can read for more info :

http://www.securityfocus.com/archive/75/393539/2005-03-17/2005-03-23/1

http://www.securitytrap.org/mail/incidents/2005/Mar/

Show quoteHide quote
"harrycatcjf" <harrycat***@discussions.microsoft.com> wrote in message
news:AD2D33AE-8956-42C7-87D9-BFD40328F431@microsoft.com...
> I found winsupdater.exe in the taskmanager,and it automatically  execute
in
> the startup.When i  disabled it in the startup option,but i still
> automatically execute.Even I can not install the anti-adware .How can i
fix
> it?I search it in Google,and nothing is valuable.And the computer is very
> slow.
> Any suggestion is appreciated.
>