msupdate.exe winocx32.exe

Hey guys can someone give me some info on these files please.

I have a dual boot system, normally running XP and these files keep appearing in my win98 startup folder. AVG keeps telling me they are the protoride virus so I delete them, but when I check the registry to edit the exe key I find that it has not been changed.

The virus does not actually seem to have infected my system but how come these files keep appearing?

Is there anything else I need to be looking at ?

Thanks in advance

 

It's probably protoride (which is nasty to completely clean) but there's another possibility...

Having said that, disabling System Restore in your XP installation might be something you missed. Here's some info and manual removal instructions on protoride, including disabling SR:
http://securityresponse.symantec.com/avcenter/venc/data/w32.protoride.worm.html

But before I resorted to the manual removal I'd see if the Housecall online scanner can clean it:
http://housecall.trendmicro.com/

Either way you'll need to disable SR first in XP (don't re-enable until you're positive you're clean) and scan/clean both XP and 98.

That msupdate.exe file can also be part of a CoolWebSearch hijacker variant, so to be on the safe side download and run CWShredder.

 

Hi alanc

Thanks for that.

Unfortunately I have already tried housecall and manual removal after disabling SR with no joy

After supposedly removing the virus I run another scan which comes up clean but later on, without rebooting those files reappear.