 |
|
|
|
Next: Best Anti-Virus, Firewall, Etc?
|
| Author |
Message |
External
Since: Jan 06, 2008
Posts: 2
|
(Msg. 1) Posted: Sun Jan 06, 2008 5:53 pm
Post subject: Wudfhost.exe
Archived from groups: alt>comp>anti-virus (more info?)
|
|
|
Hi,
I'm no expert on virii and recently my system was badly infected. By default
I have Avira AV running, so I have no idea how it got past that - but it
managed to disable Avira. In fact it was my attempts to get that back into
operation which led me to suspect a possible virus.
I could not get that going again, so I tried a fresh download and the
install failed with errors, I downloaded numerous other free AV software and
all failed to install. I then used one of the online scanners which
confirmed the problem - I could not even manage a safe boot into XP, it just
blue screened. Checking what processes were running I found Wudfhost.exe
which was one I didn't recognise, plus a file with what seemed to be a
random number.exe - I could stop the processes, but they would reappear
within seconds.
I could not find any information about solving it on the Internet so in
desperation I ran a search for Wudfhost in my registry, finding it in a
section called Wudf. I deleted the complete section, after which I could
once again install AV software and check for anything else which might be
lurking on my system - it found lots more and managed to clear it all.
--
Regards,
Harry (M1BYT) |
|
| Back to top |
|
 | |
External
Since: Sep 14, 2004
Posts: 462
|
(Msg. 2) Posted: Mon Jan 07, 2008 5:01 pm
Post subject: Re: Wudfhost.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
On this special day, Harry Bloomfield wrote:
> I could not get that going again, so I tried a fresh download and the install
> failed with errors, I downloaded numerous other free AV software and all
> failed to install. I then used one of the online scanners which confirmed the
> problem - I could not even manage a safe boot into XP, it just blue screened.
Sounds very familiar, look here:
http://isc.sans.org/diary.html?storyid=3807
http://isc.sans.org/diary.html?storyid=3817
Did you by chance recently buy anything that counts as a "drive" (USB
stick, M3 player, photo frame, whatever), that hosts ab "autorun.inf"?
Gabriele Neukam
Gabriele.Spamfighter.Neukam.TakeThisOut@t-online.de
--
If everybody started to do what they think should be done for the
common
good, democracy would not exist anymore.
-
Guillermito in alt.comp.virus |
|
| Back to top |
|
| |
External
Since: Jan 06, 2008
Posts: 2
|
(Msg. 3) Posted: Mon Jan 07, 2008 7:09 pm
Post subject: Re: Wudfhost.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
"Gabriele Neukam" <Gabriele.Spamfighter.Neukam.RemoveThis@t-online.de> wrote in message
news:fltibl$kuu$03$1@news.t-online.com...
> On this special day, Harry Bloomfield wrote:
>
>> I could not get that going again, so I tried a fresh download and the
>> install failed with errors, I downloaded numerous other free AV software
>> and all failed to install. I then used one of the online scanners which
>> confirmed the problem - I could not even manage a safe boot into XP, it
>> just blue screened.
>
> Sounds very familiar, look here:
>
> http://isc.sans.org/diary.html?storyid=3807
> http://isc.sans.org/diary.html?storyid=3817
>
> Did you by chance recently buy anything that counts as a "drive" (USB
> stick, M3 player, photo frame, whatever), that hosts ab "autorun.inf"?
>
>
> Gabriele Neukam
>
> Gabriele.Spamfighter.Neukam.RemoveThis@t-online.de
>
> --
> If everybody started to do what they think should be done for the common
> good, democracy would not exist anymore.
> -
> Guillermito in alt.comp.virus
>
>
The symptoms were very similar, but no I have not bought or added any new
devices recently. I don't remember whether msconfig was disabled or not and
rather than not be able to browse AV sites - I was able to download them,
but nothing I downloaded would successfully install. >> Stay informed about: Wudfhost.exe |
|
| Back to top |
|
| |
External
Since: Jan 19, 2006
Posts: 282
|
(Msg. 4) Posted: Mon Jan 07, 2008 8:19 pm
Post subject: Re: Wudfhost.exe [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
|
|
|
On Sun, 6 Jan 2008 17:53:33 -0000, "Harry Bloomfield"
<harry.m1byt.RemoveThis@NOSPAMtiscali.co.uk> wrote:
>blue screened. Checking what processes were running I found Wudfhost.exe
>which was one I didn't recognise, plus a file with what seemed to be a
>random number.exe - I could stop the processes, but they would reappear
>within seconds.
When this happens, close down the first process (wudfhost.exe) and
when it restarts it will be as a child of the process which restarted
it (strange number.exe) so you then need to kill the process *tree* of
the second process. This is a right click option of the windows task
manager or preferably use process explorer which shows the parent
child relationship more clearly.
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx
Jim. >> Stay informed about: Wudfhost.exe |
|
| Back to top |
|
| |
| Related Topics: | Netspy trogan - Hi all, new here and I think I got a problem? My Norton firewall reports a trogan and here is the information: Netspy Trogan Horse program: windows.exe protocol: TCP inbound remote address 127.0.0.1:3012 Local address: all local adapters:1024 I don't....
about virus - Hello, Help me please. When I browse internet, I often get virus warning messages: Virus name: W32/Deloder.worm Infected file: C:\WINNT\system32\Dvldr32.exe and Virus name: BackDoor-ARG.dr Infected file: C:\WINNT\system32\inst.exe Neither files can be....
Virus SW registration for updates - I have an older version of Norton Antivirus that Norton no longer supports. I do not have to pay a subscription for updating my .dat files. Does all of the newer Software require that users pay such a subscription? Would anyone have any idea why Norto...
how to scan and disinfect NTFS from a floppy AV? - I have been trying to find a way to boot a pc with the ntfs file system and scan and clean with f-prot for dos from a floppy(s). Winternals ntfsdos prof. 4.0 according to Winternals emails to my questions, will not work. They said the pc must be on a..
NOD32 error message - I hope someone here is familiar enough with NOD32, v. 2.0, to offer some help. I haven't been using it very long, having just replaced Kaspersky AV with it. I received an attached Word document via e-mail from a trusted source. I don't believe it.. |
|
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
|
|
|
|
|
|
|
FAQ
Profile
Private Messages
Log in
