Hijack.WIndowsUpdate

[obichni]

Dear Everybody.

MB found and deleted this (Hijack.WindowsUpdate) from the registry, but, as expected, it comes back everytime computer reboots.

What I noticed is that iexplore.exe multiples in the task manager and hangs ther even I close Internet explorer.

Also, there is one sample.mpg file that I cannot delete from my movies folder. I tried to rename or move it, still impossible to delete. It says it is being used by another programe, even after I reboot computer.

Please advice.

Merry Xmas and happy and succesfull 2011 to you all.

This is my log:

Malwarebytes' Anti-Malware 1.44

Verzija baze podataka: 3510

Windows 5.1.2600 Service Pack 3

Internet Explorer 8.0.6001.18702

25.12.2010 17:04:05

mbam-log-2010-12-25 (17-03-27).txt

Tip provjere: Kompletna Provjera (C:\|D:\|)

Provjerenih objekata: 236942

Vrijeme trajanja: 1 hour(s), 10 minute(s), 46 second(s)

Zara

[Haider]

Hello obichni:

Happy Holidays to you too

You are running old version of MBAM with outdated database. Current version of MBAM is 1.50.1.1100 and database 5396. What is your default system locale?

Sorry to hear that your system is infected. Please read and follow the instructions in I'm infected - What do I do now? An Expert will assist you in removal process. Alternatively, as a paying customer, you can contact the Help Desk

[obichni]

Thank u 4 ur reply, H

I am running F-secure as antivirus program and last virus it found (and removed) was Gen:Variant.Kazy.6148

[Haider]

Hi obichni:

What about MBAM version and database update? If updated version scan also fails then please follow instructions for getting advise from experts!

[obichni]

Hi obichni:

What about MBAM version and database update? If updated version scan also fails the please follow instructions for getting advise from experts!

I did that, it found 4 more malware that it succesfully removed. (Log is down) But Hijack.WindowsUpdates still comes back after this, and multiple iexplore.exe in task manager is still there.

Here is the log:

Vrijeme trajanja: 1 sat(i), 14 minuta, 54 sekundi

Zara

[Haider]

Hello obichni:

Please follow instructions in Post #2

[obichni]

Hello obichni:

Please follow instructions in Post #2

Thank u, H.

I did. Following is copy/paste DDS.txt, and attaching 2 other files. I am also starting new post as advised.

DDS (Ver_10-12-12.02) - NTFSx86

Run by Farka

Attach_ark.rar