English Deutsch Français Italiano Español Português 繁體中文 Bahasa Indonesia Tiếng Việt ภาษาไทย
All categories

I found it in my process list. What does this program do?

2007-03-18 20:19:13 · 5 answers · asked by Anonymous in Computers & Internet Security

5 answers

It is a hijack spyware program. Here's a log about it I found for you:

Lawrence Abrams07-08-2004, 02:04 PM
"Etan" wrote in message
news:2918d01c464ef$b2d08d70$a401280a@phx.gbl...
> Dear expert,
> My computer is attacked by a spyware and hijack program.
> The symptomps are as follow :
> 1. Everytime I open website using internet explorer, it
> open the pornsite.

Do these steps first:

Please follow these steps in order to clean your computer of Malware which
can include Viruses, Trojans, Worms, Spyware, Hijackers and Dialers.

Step 1:
Download Spybot and Adaware from the following locations and install them.
You should run both programs and clean up what it finds. This is to
gaurantee that you find the most malware you can installed on your computer.

Before running the scans on both programs, it is mandatory that you update
the programs. There are update options in each program when you run them.

Spybot
http://www.safer-networking.org/index.php?page=download

Ad-Aware
http://www.lavasoftusa.com/software/adaware/

If you would like to learn more about how to use these two programs with the
proper settings you can read the tutorials below:

AD-AWARE Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=48

SPYBOT SEARCH AND DESTROY Tutorial
http://www.bleepingcomputer.com/forums/index.php?showtutorial=43

When you scan with both programs, fix everything that it finds.

When you are done with the scan and fixing the items. Please continue with
the next step.

Step 2:

It is important that you run Spybot and Adaware before you proceed with this
step. Fixing enties with Hijackthis may leave behind unwanted files on your
computer if the previous step was not done first.

Create a directory on your hardrive to save HijackThis.exe. A directory
like c:\hijackthis. If you do not do this, you will not be able to use the
backup/restore features.

Download HijackThis from:

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Save this file into the directory you made previously and then run the
program. Click on the Scan button and when it is finished click on the Save
Log button. A Notepad window will open with the contents of this log. Click
on Edit then click on Select all. Then click on Edit and then Click on
Copy.

Register an account at http://www.bleepingcomputer.com and post this created
log into the Hijackthis Logs forum at that site. To do this, once you are
registered, create a new post, right click in message area and select paste
to paste the log into the post.

An expert will reply to you after reading this post. DO NOT fix any entries
unless you are absolutely sure you know what you are doing as you may cause
more damage to the system

To see a tutorial on using HijackThis you can click on the link below.

http://www.bleepingcomputer.com/forums/index.php?showtutorial=42

--
Lawrence Abrams
http://www.bleepingcomputer.com
Source for Original Content, Tutorials, and Support for the beginning
computer user.


Hope it is of some help.

2007-03-18 20:30:32 · answer #1 · answered by Chillyboy 3 · 0 0

Well I think that your ACNUpdater.exe could either be malicious spyware/malware or it could be genuine from Accenture.com. But, have you actually installed anything which said anything about accenture. If you did there is a higher chance that it is genuine. If you find nothing which has to do with or said it will be installing something to do with accenture then it is more likely that it is malicious since i have known processes to be hidden by putting the name as something which is genuine. So if you find nothing to do with accenture then get your spyware and virus detectors out and start searching.

Hope this helped!

2007-03-19 07:12:33 · answer #2 · answered by Skyler D 1 · 0 0

I really have no idea why people are telling you to remove this file and scan your computer for malware, as it is a completely genuine and legitimate file used by Accenture?

Information on the GOOD file here:
http://spywarefiles.prevx.com/RRFHIF14130316/ACNUpdater%252Eexe.html

2007-03-19 05:41:22 · answer #3 · answered by Secure Expert 5 · 0 0

It appears to be related to software from Accenture.com, check here for more information: http://www.securitystronghold.com/gates/spyware-adware-solutions/aauclient_ACNUpdater.exe_solution.htm

2007-03-19 03:22:29 · answer #4 · answered by Anonymous · 0 0

It's a tool for malware!

2007-03-19 03:21:39 · answer #5 · answered by WO LEE 4 · 0 0

fedest.com, questions and answers