Sylvander
05-24-2004, 01:00 PM
Noticed it as a running task in the "Close Program" window.
Checked it out and found it was a worm.
The file is at:
C:\Windows\System\wucrtupd.exe"
The "run" setting in the registry is at:
“HKLM\Software\Microsoft\Windows\Current Version\run”
Deleted the file, so it is in the recycle bin until I use “Eraser” to permanently eliminate it.
Used “Msconfig” to remove it’s tick in the “Startup” list.
So now it is at:
“HKLM\Software\Microsoft\Windows\Current Version\run-”
in the registry, which will prevent it from being run automatically at startup.
But what I’d like to know is how it got onto my PC.
I’m very careful with e-mails and haven’t received any with attachments recently.
Except that last night my wife ran a “.pps” file attached to an e-mail she sent home from her work.
I saved a copy to the desktop and attached it to an e-mail and sent it to 4 people this morning.
Ouch!
When I scanned the file with AVG it found nothing amiss!
Checked it out and found it was a worm.
The file is at:
C:\Windows\System\wucrtupd.exe"
The "run" setting in the registry is at:
“HKLM\Software\Microsoft\Windows\Current Version\run”
Deleted the file, so it is in the recycle bin until I use “Eraser” to permanently eliminate it.
Used “Msconfig” to remove it’s tick in the “Startup” list.
So now it is at:
“HKLM\Software\Microsoft\Windows\Current Version\run-”
in the registry, which will prevent it from being run automatically at startup.
But what I’d like to know is how it got onto my PC.
I’m very careful with e-mails and haven’t received any with attachments recently.
Except that last night my wife ran a “.pps” file attached to an e-mail she sent home from her work.
I saved a copy to the desktop and attached it to an e-mail and sent it to 4 people this morning.
Ouch!
When I scanned the file with AVG it found nothing amiss!