Solved

Getting error "wupdt.exe has completed an illegal operation"

Posted on 2004-09-27
2
737 Views
Last Modified: 2013-12-04
As I tried to launch IE I started getting this error.  "wupdt.exe has completed an illegal operation" and windows gives it the boot.  I believe it is apart of the IMISERV virus.  What is it and how do you get it off your system?
0
Comment
Question by:Iggy79
2 Comments
 
LVL 2

Author Comment

by:Iggy79
ID: 12163110
0
 
LVL 32

Accepted Solution

by:
LucF earned 150 total points
ID: 12163151
Hi Iggy79,

There are way more virusses that use this filename, the most common is Gaobot.
Please boot into safe mode and do a full systemscan with your favorite virusscanner.
Or http://housecall.antivirus.com (also from safe mode, so you can be sure it's not started by default.

Another thing you can do is check the following registry entries:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunServices
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce
Remove wupdt.exe in any case you find it. Then do a full virusscan in normal windows mode.

Greetings,

LucF
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, a new law in my state forced us to get a top-to-bottom analysis of all of our contract client's networks. While we have documentation, it was spotty at best for some - and in any event it needed to be checked against reality. That was m…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question