Computing.Net > Forums > Windows 2000 > ms-update.exe and ms-updater.exe

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

ms-update.exe and ms-updater.exe

Reply to Message Icon

Name: chirag shah
Date: October 9, 2003 at 17:14:18 Pacific
OS: windows 2000
CPU/Ram: athlon xp 2800+
Comment:

okay i just installed windows 2000 a week ago and was hit with the blaster worm... i removed it with the utility and patched up my system with all the updates from microft. now everytime i boot my computer i see ms-update.exe in my task list and ms-updater.exe in my system32 folder. well i kill the task and delete it but it comes back when i reboot. and it also shares my c drive when i reboot also. i have looked everywhere but i cant find any help. and yes i have scanned my computer with an antivirus and it does the same thing.



Sponsored Link
Ads by Google

Response Number 1
Name: keltikgent
Date: October 9, 2003 at 18:23:36 Pacific
Reply:

hey how you doing
ok do this go into control panel>>administative tools>>services
find updater right click on it go to properties and disable it then then right click on it again and click on stop
should solve that problem.


0

Response Number 2
Name: cshah
Date: October 9, 2003 at 23:18:34 Pacific
Reply:

hey i think my problem is getting worse :(

i couldnt find ms updater in the services list.

i think my svchost and msmgmnt.exe is corrupted because when i end the task my internet becomes significanly faster but the process keeps coming back shortly after killing the task.

also i did delete the svchost and winmgmt.exe but they keep coming back.

heres the list of processes...

Logfile of HijackThis v1.97.2
Scan saved at 1:17:27 AM, on 10/10/2003
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\ZoneLabs\vsmon.exe
C:\WINNT\system32\Ati2evxx.exe
C:\WINNT\Explorer.exe
C:\Program Files\ASUS\Probe\AsusProb.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Zone Labs\ZoneAlarm\zapro.exe
C:\Program Files\AIM\aim.exe
C:\Program Files\Steam\Steam.exe
C:\hix\mirc.exe
C:\Program Files\Internet Explorer\IEXPLORE.exe
C:\Program Files\Internet Explorer\IEXPLORE.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\regedit.exe
C:\WINNT\system32\taskmgr.exe
C:\PROGRA~1\WINZIP\winzip32.exe
C:\Documents and Settings\Chirag Shah\Local Settings\Temp\HijackThis.exe

O2 - BHO: (no name) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\system32\msdxm.ocx
O4 - HKLM\..\Run: [ASUS Probe] C:\Program Files\ASUS\Probe\AsusProb.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\PROGRA~1\ZONELA~1\ZONEAL~1\zapro.exe
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [zonealarm] C:\Program Files\Zone Labs\ZoneAlarm\zonealarm.exe
O4 - HKCU\..\Run: [AIM] C:\Program Files\AIM\aim.exe -cnetwait.odl
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra 'Tools' menuitem: Sun Java Console (HKLM)
O9 - Extra button: Research (HKLM)
O9 - Extra button: Related (HKLM)
O9 - Extra 'Tools' menuitem: Show &Related Links (HKLM)
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/bcd48c18cb7498/housecall.antivirus.com/housecall/xscan53.cab
O16 - DPF: {9F1C11AA-197B-4942-BA54-47A8489BB47F} (Update Class) - http://v4.windowsupdate.microsoft.com/CAB/x86/unicode/iuctl.CAB?37891.6117592593
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://active.macromedia.com/flash2/cabs/swflash.cab



0

Response Number 3
Name: keltikgent
Date: October 10, 2003 at 07:35:28 Pacific
Reply:

ok
not sure what u should do but stop deleting files for one.the ones you keep trying to delete wondows needs those.ok try a system repair.i hope u have the emergency repair disk or the win 2000 cd.if you have the cd set bios to boot from cd first put cd in and let it run then do a system repair see if that works.i see alot of people using that hijack program seems to be giving them alot of grief ,could that program be corrupted with a trojan or something personally i never used it.
but try a repair on the windows system see if that corrects stuff.


0

Response Number 4
Name: Tigerseyes
Date: October 11, 2003 at 23:44:54 Pacific
Reply:

Very very bad malware
go to this forum
It is a hijaker/spyware.
It hit me hard
http://forums.techguy.org/showthread.php?s=b60b06cb83f3e6be28b93c89067797ba&threadid=142771&perpage=15&pagenumber=11


0

Sponsored Link
Ads by Google
Reply to Message Icon

Related Posts

See More







Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Windows 2000 Forum Home


Sponsored links

Ads by Google


Results for: ms-update.exe and ms-updater.exe

whats MS update for ATI Graphics www.computing.net/answers/windows-2000/whats-ms-update-for-ati-graphics-/61786.html

svchost.exe problem www.computing.net/answers/windows-2000/svchostexe-problem/51183.html

LSASS.EXE Pop up Msg.... www.computing.net/answers/windows-2000/lsassexe-pop-up-msg/57720.html