wugrds.exe

[Bill90017]

I found this line in my registry

In the

HKEY_USERS\DEFAULT\SOFTWARE\MICROSOFT\WINDOWSCURRENTVERSION\RUN

I found the file "win update" with the value "wugrds.exe"

I find this to be a suspicious entry and want to delete this. Can anyone tell me if it is safe to do so.

P.S. I've been having trouble with the sasser virus. The one that shuts my system down in 60 seconds and re-boots.... over and over again.

I'm running windows 2000 and started my machine in safe mode. I ran nortin antivirus 2004 and NAV only found w32.randex.gen and w32.spybot.worm and removed both. NAV did not find w32.sasser

Any comment or help would be greatly appreciated.

Thanks

Bill

[Arin]

yes its safe to delete this key as well as the file itself. its probably Sdbot or Spybot. run a thorough scan after updating your antivirus.

you'll have to apply the latest service packs for your Windows 2k machine. the latest is sp4. after that either update your OS or manually download the Sasser patch from here. apply this patch and you'll be safe from Sasser attack.