|
|
|
re: Question about 'How do get the taskbar and desktop back if Explorer crashes'
Tuesday, April 27, 2004 at 8:39 am
Windows XP Annoyances Discussion Forum
Posted by WhiskeyDrinker
(1 messages posted)
So you are aware, winupd.exe is a keylogger, and an e mail worm, amongst other things.
It also opens port 6667 i believe. The reason it keeps coming back, is that it
is spawned from another program called STROPEN.exe, which also installs CMD32.dll,
and SDSINI.ini (both in \Windows). You will have to get rid of these files, and
any instance of them in your registry as well. Also, you may want to look for slipped.exe,
enterprise.exe and leiame.exe which can also be bundled with this trojan.
A good reference page can be found here:
http://www.sophos.com/virusinfo/analyses/trojtofgeru.html
On Tuesday, April 13, 2004 at 12:58 pm, krash1201 wrote:
>Bada Bing....so that worked, if you can locate the file in the registry, run-->regedit,
>then you can delete the file there, and on restart you can delete the file from
the
>location on the harddrive. when i went into delete the file norton nailed it and
>deleted it, something it hadn't been able to do prior. hope that helps deal with
>the rather pertinacious file. Cheers!
>
>
>
|
All messages in this thread [show all]
 | | |  |  | re: Question about 'How do get the taskbar and desktop back if Explorer crashes' (WhiskeyDrinker: Tue, Apr 27, 2004, 8:39 am) |
| |
| |
Return to the Windows XP Discussion Forum
|
|
|
|
