sp2 update.exe - Dangerous
sp2 update.exe
Manual removal instructions:
Antivirus Report of sp2 update.exe:
sp2 update.exe
SP2 UPDATE.exe is a worm W32.Elitper.F@mm.
SP2 UPDATE.exe spreads using MS Outlook and via open network shares.
SP2 UPDATE.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%ProgramFiles%\Windows Media Player\svchost.exe
%Userprofile%\Start Menu\Programs\Startup\XPStartup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\XPStartUp.exe
C:\Torrie&Stacy.exe
C:\ProgramFiles\Torrie&Stacy.exe
%ProgramFiles%\SP2 UPDATE.exe
%Windir%\TASKMGR .exe
%ProgramFiles%\Internet Explorer\Iexplore .exe
%ProgramFiles%\Internet Explorer\Norton Internet Security.exe
C:\Virus Detected.txt
C:\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
C:\My Downloads\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Edonkey2000\Incoming\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\BearShare\Shared\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Grokster\My Grokster\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Morpheus\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KaZaA Lite\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Kazaa\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KMD\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\My Documents\Downloads\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\Local Settings\Application Data\Shareaza\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
Adds the value:
"Firewall" = "%Program Files%\SP2 UPDATE.exe"
"Protection" = "%Program Files%\Internet Explorer\Norton Internet Security.exe"
"SysRes" = "%Program Files%\Internet Explorer\IExpIore .exe"
to the Windows startup registry keys.
Removal:
Kill SP2 UPDATE.exe process and remove SP2 UPDATE.exe from Windows startup.
| sp2 update.exe | Malware |
| sp2 update.exe | Dangerous |
| sp2 update.exe | High Risk |
SP2 UPDATE.exe spreads using MS Outlook and via open network shares.
SP2 UPDATE.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%ProgramFiles%\Windows Media Player\svchost.exe
%Userprofile%\Start Menu\Programs\Startup\XPStartup.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\XPStartUp.exe
C:\Torrie&Stacy.exe
C:\ProgramFiles\Torrie&Stacy.exe
%ProgramFiles%\SP2 UPDATE.exe
%Windir%\TASKMGR .exe
%ProgramFiles%\Internet Explorer\Iexplore .exe
%ProgramFiles%\Internet Explorer\Norton Internet Security.exe
C:\Virus Detected.txt
C:\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
C:\My Downloads\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Edonkey2000\Incoming\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\BearShare\Shared\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Grokster\My Grokster\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Morpheus\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KaZaA Lite\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\Kazaa\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
C:\Program Files\KMD\My Shared Folder\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\My Documents\Downloads\Torrie & Stacy Nude ScreenSaver.exe
%UserProfile%\Local Settings\Application Data\Shareaza\Incomplete\Torrie & Stacy Nude ScreenSaver.exe
Adds the value:
"Firewall" = "%Program Files%\SP2 UPDATE.exe"
"Protection" = "%Program Files%\Internet Explorer\Norton Internet Security.exe"
"SysRes" = "%Program Files%\Internet Explorer\IExpIore .exe"
to the Windows startup registry keys.
Removal:
Kill SP2 UPDATE.exe process and remove SP2 UPDATE.exe from Windows startup.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.