Re: Application updater

anonymous_at_discussions.microsoft.com
Date: 12/30/03 

Date: Tue, 30 Dec 2003 00:04:35 -0800

Sharon,

Following your last advice, I have the following info:

1/ I got and use Kazaa
2/ I downloaded Spybot Search & Destroy and found 112
problems on my PC ! Given some of them are linked to
windows register or files I don't know, I don't feel so
comfortable in correcting all of them.
3/ Could not apply the fix suggested on
http://de.trendmicro-
europe.com/consumer/security_info/ve_detail.php?
Vname=BKDR_SDBOT.BE

Given all of this, which way do you advice me to go ?

Thanks for your help. You seem seem to be a real expert !

Renaud
>-----Original Message-----
>On Sun, 28 Dec 2003 12:45:46 -0800,
<anonymous@discussions.microsoft.com>
>wrote:
>
>> Thanks for your help.
>>
>> The application involved is wupdater.exe, release
1.3.1.0
>> (module ntdll.dll version 5.1.2600.1217). So I guess
this
>> is linked to the automatic windows update process. I
try
>> to reach Microsoft via the "passport.NET" process but
it
>> does not need so easy.
>> Any idea on this ?
>> Thanks
>
>wupdater.exe is still not a file from XP. A search on
google for the file
>name brings up several possibilities ranging from Kazaa,
BHO, adware, worm
>and virus.
>
>If the one you have managed to pick up on your system is
a BHO or adware,
>using a good anti-adware program (such as AdAware,
Spybot Search & Destroy
>or Hijack This) will help you to ferret it out and
remove it from your
>system. In addition, you can perform a quick online
check for adware,
>spyware, hijackers and other parasites available here:
>http://www.aumha.org/a/noads.htm
>
>There are links on the above page leading to
doxdesk.com, a site well-known
>for accurately documenting various parasites. Another
good resource site
>for this kind of info: http://www.mvps.org/inetexplorer/
(see the "Bugs,
>Glitches and Stuffups" pages)
>
>Here's a link to one of the antivirus sites that reports
wupdater.exe
>showing up in a recent backdoor trojans (recent enough
that XP is mentioned
>anyhow):
>http://de.trendmicro-
europe.com/consumer/security_info/ve_detail.php?
Vname=BKDR_SDBOT.BE
>
>--
>Sharon F
>MS MVP - Windows XP Shell/User
>.
>

Relevant Pages

  • Re: removing auto ad popups
    ... Bonzai Buddy, or KaZaA, and their remnants, that you've deliberately ... Destroy from www.safer-networking.org/. ... It's even possible to use SpyBot Search & Destroy to "immunize" your ... >I installed Kazza on my system and now i get ad popups as soon as i ...
    (microsoft.public.windowsxp.general)
  • Explorer still crashing
    ... lavasoft as you suggested and also tried 'spybot search ... and destroy' (from the advice of a friend)... ...
    (microsoft.public.windowsxp.general)
  • Re: deleting Kazaa
    ... Bonzai Buddy, or KaZaA, and their remnants, that you've deliberately ... scumware) are Ad-Aware from www.lavasoft.de and SpyBot Search & ... Destroy from www.safer-networking.org/. ... It's even possible to use SpyBot Search & Destroy to "immunize" your ...
    (microsoft.public.windowsxp.general)
  • RE: Spybot S & D
    ... for spybot search and destroy ... >I was on www.safer-networking.org on advice from a post ... I tried to download but this is the ...
    (microsoft.public.windowsxp.general)
  • Re: Trojan Horse found in this file
    ... Thanks for the advice, I'll check them out. ... using Norton AV fully updated. ... >You might want to try AVG 6.0, Adaware and spybot search ... and destroy all are ...
    (microsoft.public.security.virus)