Jump to content

Saw "Update.exe" in startup programs.

TonyStark10

By TonyStark10
in Resolved Malware Removal Logs

 Share

Recommended Posts

Porthos

Porthos

Posted
Posted

@TonyStark10

While you are waiting for the next qualified/approved malware removal expert helper to take on your case, even though you may have run the following Malwarebytes utility or its subsets, please carefully follow these instructions: Do not try any other cleaning of any kind after running the support tool. Use the computer as little as possible, or even better don’t use it at all except to check this topic and follow the instructions given.

First, Restart the computer.

Then do the following after restart.

WARNING: Do Not click the Repair System under Advanced unless requested by a Malwarebytes support agent or authorized helper

  1. Download the Malwarebytes Support Tool.
  2. In your Downloads folder, open the mb-support-x.x.x.xxx.exe file.
  3. In the User Account Control (UAC) pop-up window, click Yes to continue the installation.
  4. Run the MBST Support Tool.
  5. In the left navigation pane of the Malwarebytes Support Tool, click Advanced.
  6. In the Advanced Options, click only Gather Logs. A status diagram displays the tool is Getting logs from your computer.
  7. A zip file named mbst-grab-results.zip will be saved to the Public desktop, please attach that file in your next reply to this topic. Please do NOT copy and paste.

For the short time between when you post the diagnostic logs, and when your helper weighs in, please take no further self-directed remedial actions that will invalidate the diagnostic logs you will have sent.

Thank you.

Link to post
Share on other sites
TonyStark10

TonyStark10

Posted
  • Author
Posted
16 minutes ago, Porthos said:

@TonyStark10

While you are waiting for the next qualified/approved malware removal expert helper to take on your case, even though you may have run the following Malwarebytes utility or its subsets, please carefully follow these instructions: Do not try any other cleaning of any kind after running the support tool. Use the computer as little as possible, or even better don’t use it at all except to check this topic and follow the instructions given.

First, Restart the computer.

Then do the following after restart.

WARNING: Do Not click the Repair System under Advanced unless requested by a Malwarebytes support agent or authorized helper

  1. Download the Malwarebytes Support Tool.
  2. In your Downloads folder, open the mb-support-x.x.x.xxx.exe file.
  3. In the User Account Control (UAC) pop-up window, click Yes to continue the installation.
  4. Run the MBST Support Tool.
  5. In the left navigation pane of the Malwarebytes Support Tool, click Advanced.
  6. In the Advanced Options, click only Gather Logs. A status diagram displays the tool is Getting logs from your computer.
  7. A zip file named mbst-grab-results.zip will be saved to the Public desktop, please attach that file in your next reply to this topic. Please do NOT copy and paste.

For the short time between when you post the diagnostic logs, and when your helper weighs in, please take no further self-directed remedial actions that will invalidate the diagnostic logs you will have sent.

Thank you.

Before your reply I was searching for the solution on internet and I found one Reddit post where someone had the same exact issue and in comments he gave the solution as well.

 

I did what he wrote and it was just about deleting two registries and it went back to normal. No more update.exe on startup

Link to post
Share on other sites
Porthos

Porthos

Posted
Posted
5 minutes ago, TonyStark10 said:

I did what he wrote and it was just about deleting two registries and it went back to normal. No more update.exe on startup

If you want someone to make sure your system is clean follow my instructions.

If you think everything is ok now please tell us so we can close the topic.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Hello @TonyStark10 My name is Maurice. I will help and guide you. The 2 line items are only just about Microsoft Teams uninstaller. They show as having been disabled from startup. The entries are not any sort of infection. The procedure below will remove those entrie. I am not seeing actual infection here. The presence of your login-name on the list in Task Manager is just a happenstance. There were 2 lines only because there are 2 entries under "Startup" of this system. Anyhow, the 2 should be gone after this has finished.

Please run the following custom script. Read all of this before you start. The meaning of the "Fix button" operation here is just to run a custom script just for this particular machine.

NOTE-1:  This custom fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files.  It will attempt to run some scans with Microsoft Defender antivirus. It will attempt to clear Cache files of web browsers.  It will attempt to clear temporary file areas. It rebuilds the Winsock. Depending on the speed of your computer this fix may take 50-55 minutes or more.

Please Close all open work before you actually do begin this run.

Farbar  FRSTENGLISH program location:   Downloads folder. The tool is already on system. That is what we will use.

Please download the attached fixlist.txt file and save it to Downloads

Fixlist.txt <- < - - - -

NOTE. It's important that both files, FRSTENGLISH, and fixlist.txt are in the same location or the fix will not work.

Right-click with your mouse on  FRSTENGLISH and select "Run as Administrator" and reply Yes and allow it to proceed when prompted. That is important.

next, press the Fix button just once and wait.

You will see a green-color scroll display while FRST is running.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Downloads folder (Fixlog.txt) . Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

The system will be rebooted after the fix has run. Attach FIXLOG.txt with next reply.

NOTICE: For potential outside readers,  This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause harm.

Link to post
Share on other sites
TonyStark10

TonyStark10

Posted
  • Author
Posted
2 minutes ago, Maurice Naggar said:

Hello @TonyStark10 My name is Maurice. I will help and guide you. The 2 line items are only just about Microsoft Teams uninstaller. They show as having been disabled from startup. The entries are not any sort of infection. The procedure below will remove those entrie. I am not seeing actual infection here. The presence of your login-name on the list in Task Manager is just a happenstance. There were 2 lines only because there are 2 entries under "Startup" of this system. Anyhow, the 2 should be gone after this has finished.

Please run the following custom script. Read all of this before you start. The meaning of the "Fix button" operation here is just to run a custom script just for this particular machine.

NOTE-1:  This custom fix will run a scan to check that all Microsoft operating system files are valid and not corrupt and attempt to correct any invalid files.  It will attempt to run some scans with Microsoft Defender antivirus. It will attempt to clear Cache files of web browsers.  It will attempt to clear temporary file areas. It rebuilds the Winsock. Depending on the speed of your computer this fix may take 50-55 minutes or more.

Please Close all open work before you actually do begin this run.

Farbar  FRSTENGLISH program location:   Downloads folder. The tool is already on system. That is what we will use.

Please download the attached fixlist.txt file and save it to Downloads

Fixlist.txt 13.62 kB · 0 downloads  <- < - - - -

NOTE. It's important that both files, FRSTENGLISH, and fixlist.txt are in the same location or the fix will not work.

Right-click with your mouse on  FRSTENGLISH and select "Run as Administrator" and reply Yes and allow it to proceed when prompted. That is important.

next, press the Fix button just once and wait.

You will see a green-color scroll display while FRST is running.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Downloads folder (Fixlog.txt) . Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

The system will be rebooted after the fix has run. Attach FIXLOG.txt with next reply.

NOTICE: For potential outside readers,  This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause harm.

Actually I solved that problem before your reply, I wrote about that before.

Link to post
Share on other sites
Maurice Naggar

Maurice Naggar

Posted
Posted

Porthos gave you several suggestions on the other topic.

As far as favorite browser, I very much like BRAVE browser. It does a great job of suppressing embedded advertising. See what Lifewire has to say https://www.lifewire.com/top-internet-browsers-4589106

I am marking this thread to be closed. For you, I would recommend you run the script I posted above

Your system will benefit.

Link to post
Share on other sites
TonyStark10

TonyStark10

Posted
  • Author
Posted
18 hours ago, Maurice Naggar said:

One further, last tip. If you are a fan of Mozilla-code-based browser, you might consider the Comodo "IceDragon" browser
Information link https://help.comodo.com/topic-169-1-413-4460-.html

Can you please recommend me a privacy tool like O&O ShutUp10 that can disable unwanted stuff from Windows 10 ?

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.