wupdmgr.exe - Dangerous
%program files%\windowsupdate\wupdmgr.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
%PROGRAM FILES%\WindowsUpdate\wupdmgr.exe is W32.Iretsim.
W32.Iretsim is a worm that spreads by copying itself to removable drives. It also attempts to end security-related processes on the compromised computer.
Related files:
%DriveLetter%\Ketemu_Pocong_Di_Rumah_Sakit.scr
%DriveLetter%\Ketemu_Pocong_Di_Rumah_Sakit.pdf
%DriveLetter%\Kumpulan_Cerita_Sex_Education.scr
%DriveLetter%\Kumpulan_Cerita_Sex_Education.pdf
%DriveLetter%\Kumpulan_Kisah_Kisah_Misteri.scr
%DriveLetter%\Kumpulan_Kisah_Kisah_Misteri.pdf
%DriveLetter%\Misteri_Hilangnya_Pesawat_Adam_Air.scr
%DriveLetter%\Misteri_Hilangnya_Pesawat_Adam_Air.pdf
%DriveLetter%\Games Windows\Ramal Jodoh.pif
%DriveLetter%\Games Windows\Game Kartu.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Windows Update.lnk
%ProgramFiles%\WindowsUpdate\wupdmgr.exe
%ProgramFiles%\msvbvm60.dll
%Windir%\system32\msgsvc.exe
%Windir%\J_06_JA.pdf
%Windir%\msvbvm60.dll
%Windir%\system32\sol.exe
Kill the process %PROGRAM FILES%\WindowsUpdate\wupdmgr.exe and remove %PROGRAM FILES%\WindowsUpdate\wupdmgr.exe from Windows startup.