Upd_0001.exe is a Trojan.Webus.H.
Upd_0001.exe opens a back door on IRC channel.
Upd_0001.exe tries to terminate antiviral programs installed on a user computer.
Related files:
upd_0001.exe
%Windir%\System\CSRSS.EXE
%HomeDrive%\%HomePath%\Application Data\Microsoft\Internet Explorer\CSRSS.exe
Adds the value:
".svchost" = "%Windir%\System\CSRSS.exe"
".svchost" = "%HomeDrive%\%HomePath%\Application Data\Microsoft\Internet Explorer\CSRSS.exe"
"[PATH TO TROJAN]" = "[PATH TO TROJAN]:*:Enabled:Microsoft Update"
to the Windows startup registry keys.
More info: http://securityresponse.symantec.com/avc...
Removal:
Kill upd_0001.exe process and remove upd_0001.exe from Windows startup using RegRun Startup Optimizer.
Removal: upd_0001.exe is removed by RegRun.
Read more... Removal instructions...
Recommended software:
UnHackMe - easy removal Rootkits/Adware/Spyware.
http://www.unhackme.com
RegRun Security Suite - removal and protection.
http://www.regrun.com
RegRun Reanimator - free removal tool.
greatis.com/reanimator
RegRun - User's Choice
Vista Programs - full info...
What is hidden in MSDN?
.NET Secrets Revealed
Why software developers prefer Win32.FreeTechSecrets.com?
All Unix Manuals in Alphabetical Order
C# controls for .NET in 3 simple steps.
Constantly updated. Last update:
May 12 2008
Interesting information about Vista programs...
Need consultation?
Would you like to add your opinion?