Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.



  • Please log in to reply
1 reply to this topic

#1 AxellSlade


  • Members
  • 1 posts
  • Local time:04:07 PM

Posted 07 November 2007 - 09:04 PM

Hello people. Recently I've been getting a strange error message in italian(I think) as soon as Windows boots.

I went to check the Startup tab in msconfig and noticed an item called "Winupdater.exe", I found it strange and disabled it right away.

The problem is, I'm having a lot of problems after that error message started showing up, like:
  • IE crashes at random;
  • My internet connection dies, even though the connection IS active, meaning no web pages open, can't connect to MSN and so on... But my connection status is "Connected"[Not even Firefox works];
  • The AVG tray icon dissapears out of nowhere;
  • Explorer is having some serious hiccups, like taking some 5 or so minutes to open some folders after I double click them.
I tried scanning the computer for viruses but AVG hasn't found ANYTHING....

Any help?

Thank you!

BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 52,073 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:07 PM

Posted 07 November 2007 - 09:59 PM

Go to jotti's virusscan or virustotal.com. In the "File to upload & scan" box, browse to the location of Winupdater.exe and submit (upload) it for scanning/analysis.
Post back with the results of the file analysis.

If it comes back as malware related as I suspect, do this:

Download FileASSASSIN.zip and save to your desktop (this tool is compatible with Win 2000/NT/XP/Vista only).
  • Create a new folder on your C:\ drive called FileASSASSIN and extract (unzip) the file to that folder. (Click here for information on how to do this if not sure. Win 9x/2000 users click here.)
  • Open the folder and double-click on FileASSASSIN.exe.
  • Select the following file(s) to delete by dragging it onto the text area or select it using the (...) browse button.
    • Winupdater.exe <-- C:\Windows\system32\ folder
  • Select a removal method. Start with "Attempt FileASSASSIN's method of file removal."
  • Click delete and the removal process will begin.
  • If that did not work, start the program again, select the file(s) the same way as before and this time check "Use delete on reboot function from windows."
Note: If you cannot find the file(s), you may have to Reconfigure Windows XP to show hidden files, folders. (We are doing this so we can look for and delete hidden files if necessary but don't delete anything other than what I ask you to delete. After your system is clean, follow the same procedure to hide these files and folders again to protect them from accidental deletion).

Download AutoRuns
  • Create a new folder on your hard drive called AutoRuns and extract (unzip) the file there. (click here if your not sure how to do this.)
  • Open the folder and double-click on autoruns.exe to launch it.
  • Please be patient as it scans and populates the entries.
  • When done scanning, it will say Ready at the bottom.
  • Scroll through the list and look for a startup entry related to Winupdater.exe.
  • Right-click on the entry and choose delete.
  • Reboot your computer and see if the startup error returns.

Edited by quietman7, 07 November 2007 - 10:06 PM.

Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users