Expert: Lorry - 2/19/2007

Question
I have started to show an icon in my taskbar upon startup that I have not seen before.  When I place my mouse over the icon its says "updates are ready for your computer click here to install these updates". When I doubleclick on it I am asked how I want to install updates (express or custom).  If I rightclick on it I don't get any options to cancel or close.  I have a process running in task manager called update.exe and located numerous versions of this file under C:\winnt\softwaredistribution\download\.  I am running zonealarm and have run a scan but nothing was found. I am not sure if this is a virus or not but am thinking it is but cannot find anything on the web to show how to remove it.  When I try to end the update.exe task from task manager it will not let me.  I am running Windows 2000 professional.

Thanks in advance.

Answer
Hi Bridget,

Go to Windows Update and download the available updates.

Using Internet explorer, go to:

http://security.symantec.com/sscv6/default.asp?langid=ie&venid=sym

Click the GO button, then under Virus Detection, click Start. You might be told that you need to download and install ActiveX Controls for the scan to work, answer Yes.

Write down exactly anything it finds, then go to: http://www.symantec.com/search/  and do a search for what was found. Symantec usually has a removal tool and/or directions for removing manually. Make sure that you follow the instructions for removal, step by step, especially the part regarding disabling System Restore.

Zone Alarm is a firewall program. I would suggest downloading Spybot - Search & Destroy 1.4, a program that removes spyware, available from:

http://www.pcworld.com/downloads/file_description/0,fid,22262,00.asp

Check for updates before running. If you have trouble getting the updates, near the top of the Update Window, click the little arrow next See-Cure  #1(Europe), highlight the next one on the list, See-Cure #2 and try to download the updates. If that doesn't work, try the next one the list. until you get one you can download from. Being a free program, if too many people are using the same site to download the updates, some people will not get them.

Many people also use Ad-aware SE, another free anti-spyware program available from:

http://www.download.com/3000-2144-10045910.html

Update both programs before running a scan.

Hope this helps!
Lorry