Options

Can't delete a virus with ANYTHING

I used S&D and I found a IE-Plugin, I think this is one of my greatest problems. I checked out the file that was behind the IE-Plugin and saw it was "wupdt". It is in C:/WINDOWS. I used Ad-aware too but it did not detect anything. Can someone give me some advice here? Thanks

Comments

  • Omega65Omega65 Philadelphia, Pa
    edited July 2004
    Try Google

    Update your virus scanner, It looks like you have a trojan
  • Straight_ManStraight_Man Geeky, in my own way Naples, FL Icrontian
    edited July 2004
    What a lot of people are seeing is this: that file hides in a .CAB file in Temporary Internet Files\Content.IE5. Anything in that folder except the index file you can trash. In fact, if IE is not running, you can trash the index file also, IE will rebuild it when it next starts up.

    I run Disk Cleanup often, it can clean out the temporary internet files folder fine. It should be in Start|Accessories|System Tools|Disk Cleanup.

    Second, some folks have managed to put HJT and Spybot into a log append mode, told it to keep using the same log file. I suspect some folks are reading old entries also, cannot say for sure and not saying this is happening here when I say that, but I would say to wipe the log once in a while or tell it toi be an overwrite log so you do not have to wade through multiple log entries.

    One more thing, when you have malware, after killing, restart Windows. If same stuff you killed reappears either it is core to system or it has been messed up with entires in registry. Please do not kill malware with IE running, the partly killed stuff can restore itself if IE is open. With HJT you are modifying the registry, these changes are likely to need a restart to take effect all the way, and I would do an immediate restart so things do not have time to remod the registry again if partially killed.
  • edited July 2004
    I need serious help here
  • dodododo Landisville, PA
    edited July 2004
    what updated virus definitions antivirus program have you run?
  • edited July 2004
    Norton
  • dodododo Landisville, PA
    edited July 2004
    run a scan with housecall: http://housecall.trendmicro.com and see if it turns up anything different.

    ~dodo
Sign In or Register to comment.