The program WIN_UPDATE.EXE is used for hidden penetration into PC and its remote administration.
UnHackMe is recommended as a reliable program for solving the problem with WIN_UPDATE.EXE.
Download for free: http://www.unhackme.com
Malware Analysis of WIN_UPDATE.EXE
Full path on a computer: %Temp%\win_update.exe
Detected by UnHackMe:
Item Name: Windows Update
Author:
Current Setting: %TEMP%\WIN_UPDATE.EXE
Type: Registry Run
Removal Results: Success
Number of reboot: 1
WIN_UPDATE.EXE is known as:
Backdoor.Bladabindi.G, Trojan.Msil
WIN_UPDATE.EXE hash:
- MD5: 1f6aa01a3ca401cfa6178d54a988cdd9
The file tries to connect to the dangerous web site.
How to quickly detect WIN_UPDATE.EXE presence?
![]( "Registry")
Registry:
![]( "Files")
Files:
Registry:- HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update: “%Temp%\win_update.exe”
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run\Windows Update: “%Temp%\win_update.exe”
Files:- %Temp%\win_update.exe
- C:\win.src