on one of our laptops, windows 7, 32 bit, there is a message when starting saying that it is trying to run msupd and what program is associated with it. after logging in, i found winupd in c:\windows\system32\MEdia Player (2 capital letters ME as written) directory. a virus or trojan??? not detected by MSE, when i delete the directory it will come back again on reboot.
searching for media player gets 10zillion results.
-
http://free.antivirus.com/hijackthis/
download and run this, and save the log file onto your desktop, then copy the contents of the log file and paste it onto the box here: http://www.hijackthis.de/ and analyze it. pm me for further instructions -
A simpler alternative would be to download and run a scan using Hitman Pro.
Cheers & good luck. -
hi, thanks for advise. i forgot about hijackthis. it listed the places i looked aready and nothing bad there. only some programs not in their usual place where I had overidden the default directories.
the winupd file is actually an executable but no .exe (it has an MZ header). its not come back yet and MSE says all clear. will have a look at Hitman Pro also.
something was trying to run winupd.exe but the message i got was saing there was no program associated with it, i assume because the .exe was missing.
would a virus scanner pick up a file just called 'winupd' if it had no .exe extension?
MEdia Player virus?
Discussion in 'Security and Anti-Virus Software' started by gazzacbr, Feb 8, 2010.