|
|
|||||||
| Computers & Information Technologies « Everything related to computers and internet. » |
![]() |
|
|
Share | Thread Tools | Search this Thread |
|
|
#1 |
|
Registered Member
Last Online: 03-25-2010
Join Date: May 2008
Posts: 77
Thanks: 20
Thanked 23 Times in 18 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
|
Hi, I have found running updtic.exe in my list of processes and after a search on the net, it seems it's certainly a malware.
However, all the sites want me to download their own applications to get rid of it, rather than describe the steps to remove it I know there are some experts on these subject out here, so I would appreciate anyone who could take me through the complete steps to thoroughly remove it. note that i can't even find it in C:\WINDOWS\system32 so could it not be a malware? thx |
|
|
|
|
|
#2 |
|
Last Online: 05-30-2013
Join Date: Jan 2008
Posts: 1,788
Thanks: 10,018
Thanked 1,100 Times in 651 Posts
Groans: 1
Groaned at 6 Times in 6 Posts
|
Not finding it there doesn't mean that it is not a malware.
In regedit.exe, check HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Run and HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\Run if you find it there, get its location on your PC then delete the key value so it won't load another time with the PC. Then restart Windows.
__________________
|
|
|
|
| The Following User Says Thank You to Google For This Useful Post: | polo (08-30-2009) |
|
|
#3 |
|
Registered Member
Last Online: 03-25-2010
Join Date: May 2008
Posts: 77
Thanks: 20
Thanked 23 Times in 18 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
|
update on this: every time i reboot, symantec tells me that it found a threat called W32.Pykspa.D which i ask to remove permanently and apparently this succeeds, but keeps coming back when i restart
manually, i did the following: deleted updtic.exe from system32 (found it there) in safe mode deleted HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\Curr entVersion\RunOnce the entry "Install cleanup" Cleanlb.exe but again every time, that key reappears in RunOnce... any ideas? |
|
|
|
|
|
#4 |
|
Registered Member
Last Online: 03-25-2010
Join Date: May 2008
Posts: 77
Thanks: 20
Thanked 23 Times in 18 Posts
Groans: 0
Groaned at 0 Times in 0 Posts
|
if anyone gets this, the steps described here seems to have worked: http://dingotush.livejournal.com/
|
|
|
|
![]() |
|
| Tags |
| removal, updticexe |
| Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
|
|