New
#1
This seems to be malware
Run a scan of Malwarebytes in safe modeWindowsupdate.exe is Trojan.Bayrob.
Trojan.Bayrob is a Trojan horse that establishes a proxy server and steals sensitive information from the compromised computer.
ran Malwarebytes in safe mode the problem is still occurring, any further suggestions welcome.
1) Open the Task Manager, select Processes tab, look for the name/s windowsupdate.exe, select if found and press the End Process button. It will ask for your confirmation to end that process, select Yes.
2) Click on Start orb, type msconfig in the search box, click on Startup tab and locate and uncheck "windowsupdate.exe" (look for any other suspicious names).
3) Restart the computer, then search for"windowsupdate.exe ". Delete those.
Also search for suspicious names listed below (thanks to google):
C:\Windows\System32\drivers\msinb.sys
C:\Windows\System32\fprocl.tsp
C:\Windows\System32\windowsupdate.exe
C:\Windows\System32\winsys32.dll
4) Run CCleaner, both regular and registry. Finally run malwarebytes again.
Let us know.
this is virus and not easy to remove
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run - windowsupdate.exe - Program Information
any scaner online you have to use e.g Windows Live OneCare safety scanner: Free online tool for PC health and safety
or better to use any livecd with antivirus
http://www.raymond.cc/blog/archives/...t-rescue-disk/
For some reason or another I had AVG set to ignore this malware in the identity protection settings and as soon as I put it back on the blacklist it was picked up and quarantined.
Thanks for the advice