Remove Trojan Virus |

Aug/10

11

xpupdate.exe virus on vista help!?

AdwareBot is the best and most reliable Trojan Virus removal tool – without a doubt! If you need a fast and thorough tool that is easy to use and cost the least, then there’s only one solution – AdwareBot: AdwareBot.com


Whenever I boot up my computer, even in safe mode, I get a popup that asks me if I want to run xpupdate.exe from Sweet Alliance software on my computer. I click cancel, but I have lost my desktop background. I also had spysweeper install itself on my computer, but I was able to get rid of it by using norton 2007 in safe mode.

However, I can’t get rid of this xpupdate, and I feel it’s a virus. Can someone please help me! I’ve got Spybot S&D and Norton Internet Security 2007 trial version.

I’m running windows vista home premium on a 2-month old HP Pavilion laptop.

Also, I’ve tried doing a system restore, to 2 different restore points, but it comes back saying it was unable to be completed as an unspecified error has occurred. I don’t know what to do!! Help please!!

· · · · · · · · · · · ·

3 comments

  • Who Dares Wins · August 11, 2010 at 11:08 am

    A lot of viruses, spyware & adware sit in RAM, the registry and System Restore and because of the latter will return even after deleting or re-booting. Removing can be quite time consuming but thankfully not impossible.

    First of all turn off System Restore by right clicking on ‘My Computer’ > Properties > System Restore. Now enable “Turn off system restore on all drives” > click apply > click ok.

    Re-boot your computer in Safe Mode – (achieved by pressing F8 continually during boot up) this should clear out the viruses and spies in RAM and the registry. Now run your anti virus and anti spyware and anti adware software and delete or quarantine any viruses or spies found.

    Re-boot your computer in normal mode and complete another virus check. If all comes back clean turn on System Restore.

    Free downloads for keeping your system clean:
    http://www.emsisoft.com/en/software/free/
    http://free.grisoft.com/doc/5390/us/frt/0
    http://www.lavasoft.com/products/ad_aware_free.php?PHPSESSID=4d7a50f66c1740616ac9a4e452aab17a

    Also free Zone Alarm Firewall:
    http://www.download.com/3000-2092-10039884.html

    WDW

  • 5735guy · August 11, 2010 at 11:08 am

    He is some useful info :

    Name %SysDir%\xpupdate.exe

    Description
    xpupdate.exe is a Trojan W32.Zotob-G.
    xpupdate.exe opens a back door on IRC channel.
    xpupdate.exe tries to terminate antiviral programs installed on a user computer.
    Related files:
    %System%\xpupdate.exe
    More info: http://www.sophos.com/virusinfo/analyses...
    Removal:
    Kill xpupdate.exe process and remove xpupdate.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.

  • spywaredr · August 11, 2010 at 11:08 am

    MESSENGER SPAM !
    you have messenger spam
    NOT to be confused with your instant messenger/s

    start
    all programs
    administrative tools
    services

    all services are in alphabetical order

    Alerter–
    right click
    select properties
    from drop down menu
    select disable

    Messenger–
    same thing as above

    these are ports left open in the XP windows version but closed in Vista.
    hackers know this and ping for these open ports to install messenger spam spyware.

    after disabling,run anti-spyware program/s

Leave a Reply

<<

>>

Theme Design by devolux.nh2.me