|
Posted by =?Utf-8?B?Sm9hbyBQaW50bw==?= on May 23, 2006, 5:40 pm
If you were Registered and logged in, you could reply and use other advanced thread options
I googled this exmodul.exe threat and found several forums on how to remove
it. these possible solutions are all based in running programs like Spybot or
others that seem not to have any effect finding this threat.
Virus name:
Trojan-Proxy.Win32.Horst.ax
H-E-L-P
"Joao Pinto" wrote:
> Hi all
>
> There's a new virus that affects Windows Update. It turns Automatic Update
> in services.msc you can see it disables it. It also disables any version of
> Norton Anti-Virus.
>
> It creates a service called ##exmodul.exe that immediately connects to the
> internet sending thousands of infected mails. It has been identified as a
> trojan but it looks like a worm.
>
> It mutates from any number to another. I my case it started as 46exmodul.exe
> to 77exmodul.exe. The point is that this exploits a windows weakness and
> there's no tool to remove it from Norton or Windows Update and apparently
> neither Microsoft or Symantec knows about it.
>
> I have both Windows and Internet Security fully up-to-date.
| 
XML site map