Hi today i turned on my computer and something came up from my nis 2006 saying a program called SSUPDATE.exe was tryin to access the internet (outbound). I currently blocked it from accessing the internet. Is this program a virus?? should i allow it next time it comes up again???

THANKS IN ADVANCE!

I would block it for now until you're 100 % sure you know what it is. A quick google suggests it's possibly this , although i do believe the programme SUPERantiSpyware may also come under this name.

I would direct you to the hijackthis forum but as a newbie i'm not sure of the rules and regulations on this , so in the meantime i would deny it access and wait until one of the more experienced forum members comes along to give advice.

Can you find the file in your computer? If so, upload it to JottiScan which uses several different AV, Anti-spyware, and anti-malware scanners to check it. Post back with the results. Here is the link for JottiScan. Meantime, I'm going to see if I can find out more about what that file is.

Orange Blossom

i have superantispyware could ssupdate.exe be from that???

What folder it is in would give a hint too. If your firewall doesn't list the file path, do a search for it and if you're on XP make sure to enable search for hidden files and folders.

OB's suggestion is a good one too, but you would have to know where the file is to browse to it to have it scanned. It doesn't take long either.

you know it did list the path but i forgot it next time ill write it down. it hasnt messed up anything on my pc and i did a nis 2006 virus scan, a adaware spyware scan, a superantispyware scan, and stopzilla didnt detect a thing... the firewall thing also hasnt come up any more. but could you do me a favor and check to see if its not something to do with stopzilla because recently i allowed stopzilla to downlloa updates automatically, and could you check and make sure its not something that belongs to superantispyware???

I WOULD REALLY APPRECIATE IT THANX

I can't check it without being physically present at your machine or unless you post which folder it is in. DyFuCa is known to use that file name, but something legitimate could use it as well. If you don't want to search your own system for it and post back here what folder it is in, just post a HJT log--I know you know how to do that as you've done it before.

It MAY be , and i stress may be , superantispyware trying to update. Is it set for automatic updates ?

You may get a clue by trying to manually update the programme and see if NIS asks for permission.

Knowing the filepath is crucial. Doing a search for that file in BC's in startup database shows 4 bad news dudes, so if this thing is in your startup list, I strongly suspect you have an infection. But if it's not there, it could be something else.

Orange Blossom

The normal installation path for SUPERAntispyware is Program Files.

Open Windows Explorer, go to C:\Program Files\ and then open the folder for SUPERAntispyware.
SSUpdate can be found there. The file is 140 KB, dated 2/17/06, v1.0.0.1030.

However, since there is a malware file with the same name, you should still double check by doing a search and make sure you don't have that one as well. The DyFuCA file with that name is usually found in C:\Windows\system32\.

ok thank you ill check windows explorer and post back what i find later! THNAX FOR YOUR HELP!!

ok good news everyone i went to my programs files then superantispyware folder and SSupdate was there. So SSUpdate belongs to superantispyware.

THANX FOR ALL YOUR HELP EVERYONE!