Solved

Getting error "wupdt.exe has completed an illegal operation"

Posted on 2004-09-27
2
732 Views
Last Modified: 2013-12-04
As I tried to launch IE I started getting this error.  "wupdt.exe has completed an illegal operation" and windows gives it the boot.  I believe it is apart of the IMISERV virus.  What is it and how do you get it off your system?
0
Comment
Question by:Iggy79
2 Comments
 
LVL 2

Author Comment

by:Iggy79
ID: 12163110
0
 
LVL 32

Accepted Solution

by:
Luc Franken earned 150 total points
ID: 12163151
Hi Iggy79,

There are way more virusses that use this filename, the most common is Gaobot.
Please boot into safe mode and do a full systemscan with your favorite virusscanner.
Or http://housecall.antivirus.com (also from safe mode, so you can be sure it's not started by default.

Another thing you can do is check the following registry entries:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Remove wupdt.exe in any case you find it. Then do a full virusscan in normal windows mode.

Greetings,

LucF
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Join & Write a Comment

As I write this article, I am finishing cleanup from the Qakbot virus variant found in the wild on April 18, 2011.  It was a messy beast that had varying levels of infection, speculated as being dependent on how long it resided on the infected syste…
SHARE your personal details only on a NEED to basis. Take CHARGE and SECURE your IDENTITY. How do I then PROTECT myself and stay in charge of my own Personal details (and) - MY own WAY...
This video discusses moving either the default database or any database to a new volume.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

759 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now