View Single Post
Old 07-26-10, 06:59 AM   #1
K007's Avatar
Join Date: Sep 2004
Location: Australia, Sydney
Posts: 9,406
Default possible virus? update.exe

hey guys seems like i picked something nasty up..

at first i saw it on my taskmanager updater.exe

so i went to msconfig found the entry located to C:\Users\user\AppData\Roaming\Microsoft\Windows\St art Menu\Programs\Startup

next i also so another entry Systemupdate pointing to users/documents/system32/update.exe

now none of these should be there, and the system32 is bogus.

strangely my NIS didn't pick up anything, and everytime i untick it...and ticks back in...

i deleted the files...

but i am surprised NIS is not picking it up...

i think the system is compromised.
K007 is offline   Reply With Quote