Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I think I got infected: C:\Windows\System32\Sytem32\updater.exe


  • Please log in to reply
4 replies to this topic

#1 EpicSky

EpicSky

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:12:45 AM

Posted 08 July 2010 - 04:59 PM

Ever since I downloaded some kind of spammer program, when I close firefox and use ccleaner to clean up, it says I must close firefox. I remember closing firefox so I checked task manager and I found ANOTHER firefox. When I close this firefox, an open file - security warning pops out with the publisher could not be verified, are you sure you want to run this file or something like that. It also says C:\Windows\System32\System32\updater.exe

I went to msconfig start-up and saw THREE WindowsApplication1 with them saying: C:\Windows\System32\System32\updater.exe, so I unchecked them and restarted. However, everytime when I restart my computer or shut down my computer and then on back the next day, I would get a black screen with the top left corner saying: setting up personalized settings for: C:\Windows\System32\System32\updater.exe with the open file - security warning in the middle. I press run and only then will my computer start to desktop.

I'm using Windows 7 Home Premium 32 bit. If you need any more information, please tell me!

EDIT: The title is actually I think I got infected: C:\Windows\System32\System32\updater.exe

Edited by EpicSky, 08 July 2010 - 05:52 PM.


BC AdBot (Login to Remove)

 


#2 Guest_Jayson201_*

Guest_Jayson201_*

  • Guests
  • OFFLINE
  •  

Posted 08 July 2010 - 05:36 PM

Im a little confused so I wont go in detail, but I recommend a full scan with Malwarebytes Anti Malware.
I do not have C:\windows\system32\updater.exe... Nor do I have C:\Windows\System32\Sytem32\updater.exe, there is no sytem32 folder in the system32 folder...
I also recommend you download and install Microsoft Security Essentials, update that and do a full scan...you may remove MSE after the scan if you wish....

I do beleive you have a virus, which is Why you should do the scan with Malwarebytes and MSE.....Can anybody else put their suggestions/thoughts in?

#3 EpicSky

EpicSky
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  

Posted 08 July 2010 - 05:51 PM

Im a little confused so I wont go in detail, but I recommend a full scan with Malwarebytes Anti Malware.
I do not have C:\windows\system32\updater.exe... Nor do I have C:\Windows\System32\Sytem32\updater.exe, there is no sytem32 folder in the system32 folder...
I also recommend you download and install Microsoft Security Essentials, update that and do a full scan...you may remove MSE after the scan if you wish....

I do beleive you have a virus, which is Why you should do the scan with Malwarebytes and MSE.....Can anybody else put their suggestions/thoughts in?

My bad, I mean C:\Windows\System32\System32\updater.exe

#4 Guest_Jayson201_*

Guest_Jayson201_*

  • Guests
  • OFFLINE
  •  

Posted 08 July 2010 - 06:02 PM

Again, I didnt see another system32 folder INSIDE the system32 folder, which leads me to believe you are infected with something.

I have the same exact operating system as you, and I just checked again, there is no such file path : C:\windows\system32\system32.....
I dont even see an updater.exe file, and I made sure I could see all hidden files....

Viruses often hide in or as an exe file...

I do highly recommend you do a full scan with Malwarebytes, and also try SUPERAntiSpyware....

#5 EpicSky

EpicSky
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:12:45 AM

Posted 09 July 2010 - 08:50 AM

Ok I'll try using these two anti-spywares to get rid of this virus I'm having, thanks! Any more people who has encountered this problem before and fixed it, you are welcome to post your solutions too. :thumbsup:




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users