Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Possible virus

31 Jan 2010   #1
mrknownothing

Windows 7 Ultimate x64
 
 
Possible virus

Hi guys,

I have 3 files, svc_update_client.exe, and svcUpdate.exe in C:\user\..AppData\Roaming\Microsoft folder. Those 2 created today except svchost.exe

They do not show as "Microsoft Corporation" when you hover the mouse over those files. Do they indicate as viruses? I ve checked with avast and it detects nothing but with VirusTotal - Free Online Virus and Malware Scan, 5 different virus checkers detect viruses contain those files.

Also shoudn't svchost.exe, svc_update_client.exe be & svcUpdate.exe in windows/system32 not in C:\user..\..roaming\folder?

Thanks in advance

Mike


My System SpecsSystem Spec
.
31 Jan 2010   #2
Dinesh

Windows® 8 Pro (64-bit)
 
 

Hi there, scan with malwarebytes.
My System SpecsSystem Spec
31 Jan 2010   #3
Jaxryley

 
 

Quote   Quote: Originally Posted by mrknownothing View Post
Hi guys,

I have 3 files, svc_update_client.exe, and svcUpdate.exe in C:\user\..AppData\Roaming\Microsoft folder. Those 2 created today except svchost.exe
Mike
If convenient can you zip those files and upload to a file share site then pm me the link to download please?
My System SpecsSystem Spec
.

01 Feb 2010   #4
mrknownothing

Windows 7 Ultimate x64
 
 

Hi, they are detected as malware by Spybot program. I have deleted them. I am sorry that I cant send them to you before I delete them. I had a look at your profile photo, "me want malware", maybe you could have a second PC or vmware with no protection at all to collect several malware, trojans etc. Why do you need malwares?

Thank you Dinesh. I didnt use spybot for a month as I should have been. Thank you

Thank you guys for time.

M
My System SpecsSystem Spec
01 Feb 2010   #5
Jacee
Microsoft MVP

Windows 7 Ultimate 32bit SP1
 
 

Backdoor Trojan! SVCUPDATE.EXE, Prevx
My System SpecsSystem Spec
01 Feb 2010   #6
Jaxryley

 
 

Quote   Quote: Originally Posted by mrknownothing View Post
Hi, they are detected as malware by Spybot program. I have deleted them. I am sorry that I cant send them to you before I delete them. I had a look at your profile photo, "me want malware", maybe you could have a second PC or vmware with no protection at all to collect several malware, trojans etc. Why do you need malwares?

Thank you Dinesh. I didnt use spybot for a month as I should have been. Thank you

Thank you guys for time.

M
Collecting/running malware samples is a hobby that I enjoy doing.

If the samples aren't detected by Malwarebytes then I post the Virus Total results along with the sample over at their forum.

I employ Sandboxie, Returnil and VM's to run samples and also have several hard drives with XP/Vista/7 installs that I plug in as to what I feel like using.

Images of all hard drives are stored on an external hd as well.

If you do get an undetected sample you can either post in Malwarebytes forum or use their Upload net.
Malwarebytes.org
My System SpecsSystem Spec
01 Feb 2010   #7
Dinesh

Windows® 8 Pro (64-bit)
 
 

You are welcome.
My System SpecsSystem Spec
Reply

 Possible virus




Thread Tools




Similar help and support threads
Thread Forum
Possible Memory Leak Virus - Anti-virus detects nothing?
Hello, I am needing some support on what is exactly taking up all the RAM on my brother's PC as after about 8 hours of uptime, 65% of my Physical Memory is being used up with nothing really open. I did some research and found out it was a possible memory leak or virus, so I first tried to run...
Performance & Maintenance
how to fix / clean windows from ramnit virus and virut virus?
my windows infected ramnit virus and virut virus,how to clean them?
System Security
I have a virus and unable to run/download anti-virus software
Hi, This is my first time posting to the forum. I am not that knowledgeable with computers, but can follow basic instructions. My laptop is acting funny--I think I have a virus. However, I am unable to run any anti-malware or anti-virus software. I try to run McAfee and I get an error...
System Security
Want ideas for Virus removal if virus shows up in safemode CMD
Hi, Looking for general ideas on how everyone else handles a strong virus. If the virus is showing up in Windows regular mode, it opens in safemode and opens in safmode with command prompt. Besides the usual such as boot to repair mode and use system restore, dock hard drive to another pc and...
System Security
RPC Virus message in Action Center, though the virus seems to be gone?
So I was managing my Laptop (Compaq Presario CQ57 with Windows Home Premium SP1) after a long time away from it, I left it in the care of a friend of mine, I noticed a few strange things. 1) I couldn't update Windows. 2) I couldn't turn ON my firewall 3) Windows Security Center was missing....
System Security
Want are the best afforable anti-virus for a trojan virus
what anti-virus would be great at getting rid of a trojan virus some of the anti virus i have used told me i had one but could not delete it.
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 05:34.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App