Archived from groups: microsoft.public.windowsxp.basics (
More info?)
Can I assume you found the culprit Carl? If so how was it changed? If it's
not WINDUPDATE.EXE any longer what is it called now?
So many people fall victum to this problem any later info would be very
helpful for everyone.
Thanks
NevBud
"Carl H. Horst" <chorst01@worldnet.att.net> wrote in message
news:ZHm0e.443805$w62.150272@bgtnsc05-news.ops.worldnet.att.net...
> Mr. Norris,
>
> Thank you for the lead. I thought I had tried that program when in fact I
> had not done so, although I had downloaded it. Interestingly, the
> lavasoft program seems to be the only virus/spyware program that succeeds
> in finding the windupdate program and removing it. Also for others who
> might have the problem, a search of your hard drive (including hidden
> files) will not find it as it appears they have changed the file name to
> one using digits rather than "windupdate."
> "Bud Norris" <bdev605@prodigy.net> wrote in message
> news:%23Pv%23o61LFHA.2940@TK2MSFTNGP15.phx.gbl...
>> PS Carl, I and many others have had this windupdate.exe trojan. When I
>> had it I talked to probably 30 people about what the trouble was all to
>> no avail. BUT when I got the ad-aware program, which is free, and ran it
>> with all the deep sacn modes checked it found the culprit. I now run this
>> ad-aware program about once a week along with Spybot Search & Destroy and
>> my anti-virus. This ad-aware program is great AND I don't have any
>> interest in it so I'm not trying to sell you anything except help.
>> NevBud
>> "Carl H. Horst" <chorst01@worldnet.att.net> wrote in message
>> news:Ys20e.163897$Th1.18000@bgtnsc04-news.ops.worldnet.att.net...
>>> Well I appreciate the several suggestions and have tried to implement
>>> each of them but without success. The problem continues.
>>>
>>> I can restore the autoexec.nt file (and config.nt and command.com file)
>>> using the "expand" command from the Operating System CDROM and that
>>> temporarily solves the problem -- the 16-bit program I want to use works
>>> normally -- until I reboot. Then autoexec.nt is gone.
>>>
>>> I have McAfee VirusScan with the latest definitions and have scaneed my
>>> computer. I also have run etrust PestPatrol and Spybot S&D. None of
>>> thes programs have found and corrected the problem. I do note that
>>> Spybot continues to find Admili Service and purpots to fix it. But it
>>> keeps reappearing. I note the hard drive has a Program Files folder
>>> named "Admilli Service" which contains two .exe files, a .dll file and a
>>> .inf file. When I try to delete this folder (or individual files) the
>>> system will not allow me to do so. Any other ideas are welcome.
>>>
>>>
>>> "Bud Norris" <bdev605@prodigy.net> wrote in message
>>> news:ekoDTTzLFHA.3016@TK2MSFTNGP15.phx.gbl...
>>>> Hi kt, It sounds like you have a program called "WINDUPDATE.EXE" in
>>>> your
>>>> computer. I had it some time ago. It is a program like a virus that
>>>> some
>>>> site has put in your computer to make you purchase updated programs,
>>>> ones
>>>> that will operate with XP's 32 bit system. What is causes is the
>>>> deleting of
>>>> your AUTOEXEC.NT file everytime you boot your computer. Without this
>>>> AUTOEXEC.NT file you can't run old 16 bit programs which were developed
>>>> for
>>>> Windows 98 or earlier.
>>>> You can search in your computer to try and find this WINDUPDATE.EXE
>>>> file and
>>>> delete it or you can download the free adware eliminating program,
>>>> AD-Aware
>>>> SE Personal 1.05, that finds and can remove these security threats. You
>>>> can
>>>> find it at www.lavasoft.com.
>>>>
>>>> Also many articles say the AUTOEXEC.NT file is in your
>>>> C:\windows\system32\
>>>> folder but sometimes your computer manfacturer put it in the C:\WINNT\
>>>> system\ folder. It the latter case your C:windows\ folder won't have a
>>>> system32 folder.
>>>>
>>>> If you install and run this ad-ware program it will find almost every
>>>> little
>>>> adware file in your computer and remove them.
>>>>
>>>> Unless you get rid of this WINDUPDATE.EXE file it will keep deleting
>>>> the
>>>> AUTOEXEC.NT file and you will have to restore it constantly.
>>>>
>>>> NevBud
>>>>
>>>>
>>>> "Carl H. Horst" <chorst01@worldnet.att.net> wrote in message
>>>> news:h%0%d.419468$w62.406579@bgtnsc05-news.ops.worldnet.att.net...
>>>>>I can't seem to restore the autoexe.nt file to my systems32 folder. I
>>>>>found and followed the Microsoft article #324767. I expanded and
>>>>>reinsalled autoexec.nt, config.nt and command.com. the
>>>>>expand/reinstall worked as expected and when I restarted the 16-bit
>>>>>program that previously revealed the problem I found it worked properly
>>>>>as well.
>>>>>
>>>>> However ,after I shutdown my computer and when I turn it on again the
>>>>> autoexec.nt file is missing and the same problem occuurs with the
>>>>> 16-bit program as occurred before the expand/reinstall.
>>>>>
>>>>> I run PestPatrol and Spyhunter with no effect on this problem
>>>>>
>>>>> Any suggestions would be welcome.
>>>>>
>>>>> --chh
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
Facebook
Twitter
Instagram