SEUPD.EXE message

[jshaw42]

Ever since Malwarebytes supposedly eliminated a virus, I get a message that there is a file that needs attention.

When I click on "quarantine" the message disappears. When I open MAMB, there is nothing in the quarantine section. What is going on here? Has the virus not been eliminated? Thanks for any help. Here is one of the logs:

07:44:47 Jack MESSAGE Protection started successfully

07:44:50 Jack MESSAGE IP Protection started successfully

07:50:02 Jack MESSAGE IP Protection stopped

07:50:04 Jack MESSAGE Database updated successfully

07:50:05 Jack MESSAGE IP Protection started successfully

07:58:15 Jack DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent QUARANTINE

07:58:16 Jack ERROR Quarantine failed: UtilityReadFile failed with error code 3

08:58:00 Jack DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

09:58:00 Jack DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

10:58:00 Jack DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

11:48:01 Jack IP-BLOCK 208.94.233.132

11:49:06 Jack MESSAGE IP Protection stopped

11:49:09 Jack MESSAGE Database updated successfully

11:49:09 Jack MESSAGE IP Protection started successfully

11:51:25 Jack IP-BLOCK 208.94.233.132

11:53:41 Jack MESSAGE IP Protection stopped

11:53:42 Jack MESSAGE IP Protection started successfully

11:58:07 Jack DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent QUARANTINE

11:58:08 Jack ERROR Quarantine failed: UtilityReadFile failed with error code 3

[exile360]

Greetings

Please do the following:

Fix Detection of Files That do Not Exist in Windows Vista and Windows 7:

Note: This fix will not work to correct any similar issues on Windows XP nor should it be run on any operating systems besides Windows Vista or Windows 7.

• Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
  

  @echo off
  net stop SysMain
  sc config SysMain start= disabled
  shutdown -r -t 10
  del /f /q %0

  Once you've done that click on File and select Save As...
  

• In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  
• Name the file Fix 1.bat (the .bat extension is very important)
  
• Save the file to your desktop but DO NOT run it yet
  
• Please copy and paste the following text exactly as written into notepad (not wordpad or any other text editor):
  

  @echo off
  del /f /q /a /s "%windir%\Prefetch"
  sc config SysMain start= auto
  net start SysMain
  del /f /q %0

  
  

• In the Save dialogue box click on the drop down menu next to Save as type and select All Files
  
• Name the file Fix 2.bat (the .bat extension is very important)
  
• Save the file to your desktop but DO NOT run it yet
  
• Right-click on Fix 1.bat and select Run as administrator then click Continue at the User Account Control prompt.
  
• Your PC will automatically restart after it runs so be sure to save anything you were working on before running it.
  
• Once your PC starts up again, right-click on Fix 2.bat and select Run as administrator then click Continue at the User Account Control prompt.
  
• The issue should now be resolved.
  

Please let me know if the issue is now corrected or not.

Thanks

[TMBtD]

Hello, I am having the same troubles as the Original poster, I recently removed AV Security Suite (not 100% sure of the name) from my computer with Malwarebytes, Spybot Search and Destroy and AVG AntiVirus free.

I also tried those suggestions above to no avail.. Heres the log:

00:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

01:23:45 Alain IP-BLOCK 66.220.17.211

01:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

02:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

03:53:27 Alain MESSAGE Protection started successfully

03:53:31 Alain MESSAGE IP Protection started successfully

03:58:55 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent QUARANTINE

03:58:56 Alain ERROR Quarantine failed: UtilityReadFile failed with error code 3

04:00:00 Alain MESSAGE Scheduled scan executed successfully

04:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

05:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

06:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

07:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

08:00:13 Alain MESSAGE Scheduled update executed successfully

08:00:29 Alain MESSAGE IP Protection stopped

08:00:31 Alain MESSAGE Database updated successfully

08:00:32 Alain MESSAGE IP Protection started successfully

10:58:49 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent QUARANTINE

10:58:50 Alain ERROR Quarantine failed: UtilityReadFile failed with error code 3

11:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

12:58:00 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent DENY

13:09:47 Alain MESSAGE Protection started successfully

13:09:50 Alain MESSAGE IP Protection started successfully

13:58:04 Alain DETECTION C:\ProgramData\UPDATE\SEUPD.EXE Trojan.Agent QUARANTINE

13:58:05 Alain ERROR Quarantine failed: UtilityReadFile failed with error code 3

Whats interesting is that the file also doesnt exist and that it tries to access it at :58 past the hour, almost EVERY hour.

Any more suggestions?

[noknojon]

Welcome TMBtD -

Is there any chance some of the infection may still remain ? Sometimes it is not fully removed -

Unless Exile360 has other ideas I would prefer you submitted this to our experts for checking -

SEUPD.EXE seems to have several meanings from what I can find - That is why I am asking you to have it looked at -

As we don't work on Malware removal or diagnostics in the general forums please follow these directions -

Please print out, read and follow the directions here, skipping any steps you are unable to complete. Then post a NEW topic here.

One of the expert helpers there will give you one-on-one assistance when one becomes available.

After posting your new post make sure under options that you select Track this topic and choose one of the Email options so that you're alerted when someone has replied to your post - Please allow at least 48 hours for a reply as the experts can get busy at times -

Also add a brief note to the experts as to your problems -

Alternatively, as a paying customer, you can contact the help desk at support@malwarebytes.org or via Here

Always use the ADD REPLY Tab at the bottom of the page when you reply -

Thank You -

[TMBtD]

Hello there, I emailed support (paying customer) and after following the steps they gave me, disable superfetch, empty prefetch, reboot, and rescan (which gave me clean results, but message still came up). They informed me it was a bug they are working on and will be fixed on the next release.

[noknojon]

No worries -

I figured it may be due to your hourly updates - Just an ?? odd message that was of no real concern -

The script was only if you felt that you still had some AV Security Suite left on the computer -

Regards -