C://windows/system32/winpup32.exe

wldkos · Post by **wldkos** » Mon Jun 16, 2003 6:16 pm

my friend has this, Norton found it for her and it somehow cannot get rid of it. It said it's a backdoor trojan....
help

Archived topic from Iceteks, old topic ID:888, old post ID:7801

Wren · Post by **Wren** » Mon Jun 16, 2003 7:08 pm

Try a program called Swat It, I don't have the link. It's free too.

If the OS is XP, system restore has to be disabled for AV scanner to remove it.

Archived topic from Iceteks, old topic ID:888, old post ID:7802

Red Squirrel · Post by **Red Squirrel** » Mon Jun 16, 2003 7:15 pm

Not sure what it is but it looks like some kind of spyware, but it might be a virus too.

Archived topic from Iceteks, old topic ID:888, old post ID:7804

Wren · Post by **Wren** » Mon Jun 16, 2003 9:45 pm

This is a partial quote from a forum about the virus:

Norton detected a virus called winpup32.exe which was located in C:WindowsSystem32. It could not auto protect or access the file and I had to manually quarantine it . I submitted it to Symantec and it is a Trojan Horse type virus. They advised me to repair it or otherwise delete if not repairable, which was the case.

Archived topic from Iceteks, old topic ID:888, old post ID:7811

wldkos · Post by **wldkos** » Tue Jun 17, 2003 2:02 am

thank you wren for the help. Somehow she fixed it herself, but I will find out more details tomorrow and post them.

Archived topic from Iceteks, old topic ID:888, old post ID:7821

Wren · Post by **Wren** » Tue Jun 17, 2003 10:43 pm

You're welcome. Yes, I would like to know more about it.

Archived topic from Iceteks, old topic ID:888, old post ID:7884

wldkos · Post by **wldkos** » Wed Jun 25, 2003 9:07 pm

HAHAH, did anyone notice the thread's title?

Code: Select all

C://windows/system32/winpup32.exe

I have been using linux too much! c:windowssystemwinpup32.exe is more like it

Archived topic from Iceteks, old topic ID:888, old post ID:8575

Red Squirrel · Post by **Red Squirrel** » Wed Jun 25, 2003 9:57 pm

Haha, now that you mention it, that's funny. Was the double slash intentional? I did not know Linux had a double slash at the start..

Archived topic from Iceteks, old topic ID:888, old post ID:8587

Chris Vogel · Post by **Chris Vogel** » Wed Jun 25, 2003 11:02 pm

Red Squirrel wrote: Haha, now that you mention it, that's funny. Was the double slash intentional? I did not know Linux had a double slash at the start..

I didn't think it did either... I thought it just things like /mnt or /home/chris/music/......

Archived topic from Iceteks, old topic ID:888, old post ID:8589

Chris Vogel · Post by **Chris Vogel** » Wed Jul 09, 2003 10:07 am

Been Infected Too wrote: I have this winpup.exe trojan too and i can't get rid of it. I have winXP...can u tell me how to disable system restore pls co i can remove it. thx a lot

To disable System Restore on Windows XP:
<ul>
<li>Right click on My Computer
<li>Go to the SYSTEM RESTORE tab.
<li>Click the box that says "Turn off System Restore".
</ul>

Archived topic from Iceteks, old topic ID:888, old post ID:9346

Wren · Post by **Wren** » Wed Jul 09, 2003 11:01 am

Once you click on My Computer, click on Properties from the drop down menu, then you will see the System Restore tab.

Archived topic from Iceteks, old topic ID:888, old post ID:9347

Chris Vogel · Post by **Chris Vogel** » Wed Jul 09, 2003 11:03 am

Wren wrote: Once you click on My Computer, click on Properties from the drop down menu, then you will see the System Restore tab.

Oops... I forgot to include that.

Archived topic from Iceteks, old topic ID:888, old post ID:9348

Wren · Post by **Wren** » Wed Jul 09, 2003 11:12 am

You can also get to it from the start menu, but going through My Computer is easier if you are not familiar with using restore.

Archived topic from Iceteks, old topic ID:888, old post ID:9349