QuietFusion
join:2003-09-25
Sandy, UT
| reply to lskohn
Re: sysupd.exe
Hi,
sysupd.exe is InternetAntispy foistware. First make sure you can see hidden files use this link for help.
»www.xtra.co.nz/help/0,,4155-1916458,00.html
Close ALL browsers and chat programs (e.g. Yahoo, MSN, ICQ)run hijackthis and place a check next to the following:
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file)
O2 - BHO: (no name) - {000020DD-C72E-4113-AF77-DD56626C6C42} - (no file)
O4 - HKLM\..\Run: [SysUpd] C:\WINDOWS\sysupd.exe
O4 - Global Startup: Microsoft Office.lnk = G:\Program Files\Microsoft Office\Office\OSA9.EXE
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} (FilePlanet Download Control Class) - »www.fileplanet.com/fpdlmgr/cabs/FPDC_1..
O16 - DPF: {4D7F48C0-CB49-4EA6-97D4-04F4EACC2F3B} (InstallShield Setup Player 2K2) - »www.napster.com/client/setup.exe
O16 - DPF: {9059F30F-4EB1-4BD2-9FDC-36F43A218F4A} (Microsoft RDP Client Control (redist)) - »darth/tsweb/msrdp.cab
and click fix. Reboot into safe mode (press f8 during reboot); find and delete the following
File:
C:\WINDOWS\sysupd.exe
That should take care of that, it's wise to do a scan with Ad-aware and Spybot after clean up with Hijackthis.
--
He who hesitates, always loses |
