[RKinner]

Another request:


C:\Windows\System32\UpdSvc.dll

as shown in:

SRV - [2011/12/26 18:29:26 | 000,114,000 | ---- | M] (Joosoft.com GmbH) [Auto | Running] -- C:\Windows\System32\UpdSvc.dll -- (Update-Service)


May be part of this same infection. Can you upload UpdSvc.dll to http://virustotal.com and see if it comes back 0/43? Did you ever use JooSoft.com to get software? I don't see any mention of JooSoft in the install list. Did you ever get an UpdateChecker program from them?

Ron

[Advertisements]

Hi

My isp just messed up big time thus I was offline for 5 days. Took them 7 attempts to get me back online

Anyway, I submited the file to avast, it said it'll do so "with the next update".
I also ran a check on updsvc.dll. As I couldn't upload it directly from the system32 folder I made a copy of the file to my desktop. Not sure if that has any influence. Anyway the file seems to be clean (0/43): https://www.virustot...sis/1331803576/

I have no idea where this joosoft file comes from. Maybe it was bundled with some download and I've been stupid enough to not uncheck the install option...

Flo

[nept]

Hi

My isp just messed up big time thus I was offline for 5 days. Took them 7 attempts to get me back online

Anyway, I submited the file to avast, it said it'll do so "with the next update".
I also ran a check on updsvc.dll. As I couldn't upload it directly from the system32 folder I made a copy of the file to my desktop. Not sure if that has any influence. Anyway the file seems to be clean (0/43): https://www.virustot...sis/1331803576/

I have no idea where this joosoft file comes from. Maybe it was bundled with some download and I've been stupid enough to not uncheck the install option...

Flo