Solved Windows update is trying to access protected

August 1, 2011 at 06:43:24
Specs: Windows XP
On start up I get the message "an application is trying to access protected files.
Program\ WINDOWS\ install\winupdate.exe

See More: Windows update is trying to access protected

Report •

August 1, 2011 at 13:22:39
Sounds malicious:

MOOOOooove! OH and you're welcome!

Report •

August 2, 2011 at 04:16:29
Many thanks , I have looked at the site you directed me to and it looks highly likely that you are correct. Problem is it does not tell me how to remove the worm.

Report •

August 2, 2011 at 08:38:45
✔ Best Answer
Good luck there....

1. Download & install MalwareBytes FREE anti-malware tool at

2. Turn off XP System Restore: Go to Control panel, System, go to System Restore tab, Check the Box next to "Turn off System restore", Click OK.

3. Launch MalwareBytes, make sure that is gets the database/malware definitions update. If it's not updated, go to Updates Tab, click Check for Updates button.

4. Go to MalwareBytes Scanner Tab, select Perform FULL Scan, then click SCAN button to start the scanner.

5. When malicious items are found, remove them.

6. I would also download & install EmsiSoft Anti-malware Free Edtn. Install it, update it, scan in Deep mode.

7. Reboot. If system is clean, re-enable System Restore by reversing steps from Step # 2 above.

If those don't work, you could try posting your issue in the Software > Security & Virus Forum here.

MOOOOooove! OH and you're welcome!

Report •

Related Solutions

August 3, 2011 at 01:59:31
Many thanks, Malwarebytes found a Trojan that my Security had missed and cured that problem. Only thing is my PC now seems very slow to start up, no quicker than when I had the Trojan. Could this mean there is something else lurking there?
I keep my PC cleaned and de fragged and am only using about 4o% of it's capacity.

Report •

August 3, 2011 at 09:44:26
Do you have antivirus installed? Type? Is it up to date?

Did you also run the EmsiSoft AntiMalware? Running only one anti-malware tool to scan an infected system is never enough.

Is the system fully patched with current service pacsk & Windows Updates (including Office Updates)?

I would need to know your PC Specs, Startup items, Windows services that are enabled and get the health status on your HDD (hard disk drive) to give you an opinion on overall PC performance. Knowing what your system specs are is a start:

CPU (Type & Speed):
RAM (Amount, type & speed):
Video (type & amount of video ram):
HDD (Type, capacity & RPM speed):

You can check startup items with this tool:

You can get your system specs with this tool:

You could test your HDD with the free manufacturers hard drive utility available from the hard drive manufacturers website to make bootable floppies or CDs to thoroughly test your hard drive surface area, mechanics and electronics:
- Seagate/Maxtor (Maxtor acquired by Seagate): Seatools.
- Western Digital: DataLifeguard.
- Fujitsu: Fujitsu Drive Test (FJDT).
- Hitachi/IBM: Hitachi Drive Fitness (HDFT).
- Samsung: (HUTIL).
- Toshiba (Fujitsu, Samsung or Hitachi utilities may work).

MOOOOooove! OH and you're welcome!

Report •

August 4, 2011 at 13:31:05
Ran Emsisoft and it found another Trojan and a few traces. Everything fine now thanks.
For your info
Pc info is.
1 Gb RAm
Running XP home, serv pck 3
Was originally Vista but I could not get on with that so I removed that and loaded XP.

Report •

August 6, 2011 at 01:32:54
Cannot work this out.After running the Malwarebytes and Emisoft my PC loaded in under 2 minutes. Next day it was back to 6/7 minutes. Ran both again and cleared non essentials from Start Up but no difference.
Any ideas please?

Report •

August 9, 2011 at 17:26:33
Core2 w/ 1 GB of RAM, that's not too bad.

Your sys could be rooted (with a ROOTKIT). You could maybe try an Anti-Root Kit like GMER, Radix, TrendMicro Rootkit Buster etc.

Per my inquiries above in Post #5:

- What are all the startup items? You could try Start, RUN, "msconfig" (no quotes) and select Diagnostic Startup.

- HDD (Hard disk drive) health is?
- Did you test the HDD with the HDD Mfgr's test utility?


- Has the HDD been defragmented? Try Auslogics Disk Defragmenter (it's free).
- Any standout items in Windows Application or System Event Viewers possibly pointing to issues?
- What type of AntiVirus and AntiSpyware are you running?

MOOOOooove! OH and you're welcome!

Report •

August 10, 2011 at 04:03:07
Hi again,
Items in start up
Spyware Terminator
I thought I had moved the Quick time one but I see it is still there.

HDD is healthy and has been defragged.
Anti virus is F-Secure.

This may not matter now as I have run GMER and restared the PC and it was quite fast, probably as fast as I have known it.
Thanks again for your help.

Report •

August 11, 2011 at 01:17:03
Oh dear, another false dawn. This morning took 6 minutes to show a screen and another 2 minutes before my home page came up.

Report •

August 12, 2011 at 13:15:40
The Spyware Terminator could be a rogue product:

If it were me, I'd dump that one. I'm not sure what you did exactly, but only running one or two anti-malware tools is never enough. Your system still may be compromised. Malware is still such a big problem, sometimes you don't get it all. Your system could be getting corrupt as well.

You could also try (I would run them all if you don't want to reinstall WIndows):

- ComboFIX
- Radix Anti-RootKit
- TrendMicro RootKit Buster
- SpyBot Search & Destroy

MOOOOooove! OH and you're welcome!

Report •

Ask Question