wugrds.exe

Discussion in 'malware problems & news' started by Bill90017, Jun 15, 2004.

Thread Status:
Not open for further replies.
  1. Bill90017

    Bill90017 Registered Member

    Joined:
    Jun 15, 2004
    Posts:
    2
    Location:
    California
    I found this line in my registry

    In the

    HKEY_USERS\DEFAULT\SOFTWARE\MICROSOFT\WINDOWSCURRENTVERSION\RUN

    I found the file "win update" with the value "wugrds.exe"

    I find this to be a suspicious entry and want to delete this. Can anyone tell me if it is safe to do so.

    P.S. I've been having trouble with the sasser virus. The one that shuts my system down in 60 seconds and re-boots.... over and over again.

    I'm running windows 2000 and started my machine in safe mode. I ran nortin antivirus 2004 and NAV only found w32.randex.gen and w32.spybot.worm and removed both. NAV did not find w32.sasser

    Any comment or help would be greatly appreciated.

    Thanks

    Bill
     
  2. Arin

    Arin Registered Member

    Joined:
    May 1, 2004
    Posts:
    997
    Location:
    India
    yes its safe to delete this key as well as the file itself. its probably Sdbot or Spybot. run a thorough scan after updating your antivirus.

    you'll have to apply the latest service packs for your Windows 2k machine. the latest is sp4. after that either update your OS or manually download the Sasser patch from here. apply this patch and you'll be safe from Sasser attack.
     
Thread Status:
Not open for further replies.