strange software > winsupdater.exe

From: SDA (sda-cr_at_racsa.co.cr)
Date: 03/15/05

  • Next message: John Pettitt: "Re: awstats holes being exploited in the wild" 
    Date: Tue, 15 Mar 2005 14:39:14 -0600
To: incidents@securityfocus.com

    Hi:

    We are looking at an abnormal program named "winsupdater.exe" and we are
    having trouble installing antispyware software on the infected computers,
    and the antivirus is not detecting the malware.
    We were able to disable it manual trough regedit, were it leaves a key entry
    in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run named
    "Microsoft Window Updater", but anyone knows if this is a new virus or
    spyware?

    Esteban Lara
    Director de IT
    Soluciones Digitales de Almacenamiento S.A.

  • Next message: John Pettitt: "Re: awstats holes being exploited in the wild"

    Relevant Pages

    • Re: strange software > winsupdater.exe
      ... > having trouble installing antispyware software on the infected computers, ... > and the antivirus is not detecting the malware. ... Filenames are all but totally useless for diagnosing malware, ...
      (Incidents)
    • Re: NT AUTHORTYAuthenticated Users & NT AUTHORITYInteractive
      ... I do have a firewall (LinkSys router/firewall) and I do ... have antivirus (symantec enterprise 8.1) fully installed ... and detecting on all units. ...
      (microsoft.public.win2000.security)
    • Re: Folder.htt & Desktop.ini Virus
      ... Antivirus is not detecting it as virus. ... They arene't viruses nor malware. ...
      (microsoft.public.security.virus)
    • Re: Help! Firewall detects problem
      ... > ZA is detecting my computer trying to reach someone else and is stopping ... What is the name of the process/application? ... Run your antivirus. ...
      (comp.security.firewalls)