Windows update error

[takenaback]

I get the following pop-up when shutting the computer down can anybody advise me how to get rid of it.



Cheers

 

[yowanvista]

This seems to be malware

Windowsupdate.exe is Trojan.Bayrob.
Trojan.Bayrob is a Trojan horse that establishes a proxy server and steals sensitive information from the compromised computer.

Run a scan of Malwarebytes in safe mode

 

[takenaback]

ran Malwarebytes in safe mode the problem is still occurring, any further suggestions welcome.

 

[Bill2]

1) Open the Task Manager, select Processes tab, look for the name/s windowsupdate.exe, select if found and press the End Process button. It will ask for your confirmation to end that process, select Yes.

2) Click on Start orb, type msconfig in the search box, click on Startup tab and locate and uncheck "windowsupdate.exe" (look for any other suspicious names).

3) Restart the computer, then search for"windowsupdate.exe ". Delete those.

Also search for suspicious names listed below (thanks to google):

C:\Windows\System32\drivers\msinb.sys
C:\Windows\System32\fprocl.tsp
C:\Windows\System32\windowsupdate.exe
C:\Windows\System32\winsys32.dll

4) Run CCleaner, both regular and registry. Finally run malwarebytes again.

Let us know.

 

[Flavius]

I get the following pop-up when shutting the computer down can anybody advise me how to get rid of it.

this is virus and not easy to remove

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run - windowsupdate.exe - Program Information

any scaner online you have to use e.g Windows Live OneCare safety scanner: Free online tool for PC health and safety

or better to use any livecd with antivirus

http://www.raymond.cc/blog/archives/2008/12/11/13-antivirus-rescue-cds-software-compared-in-search-for-the-best-rescue-disk/

 

[takenaback]

For some reason or another I had AVG set to ignore this malware in the identity protection settings and as soon as I put it back on the blacklist it was picked up and quarantined.

Thanks for the advice