Hello, i had the same problem as many of you, maybe this helps you in some form:

As you know, it was a virus, and that virus was installed because a file that was downloaded from a p2p program, like Kazaa, Limewire, etc. it seems that supports many of them.

When someone is infected by that virus, it makes a search, trying to find the Shared folder of one of the p2p programs supported and places a dummy file in that folder. The name of the file is obtained frow the names in warez pages, like phazeddl.com and others, and makes a zip file with a setup.exe file inside with a size of about 700kb or more, and because it is in shared folder, it is downloaded by members of the p2p programs.

If you download one of that files, and execute setup.exe it opens a dummy installer that sends an error to make the user that it wasn't installed, but in that moment it installs the virus and that installs a process, in my case it was winupdate.exe if i remember well.

Also the virus changes taskman.exe for a dummy file, that why you can't use Ctrl. + Alt. + Supr.. And creates some dummy com files for many common commands, like ping, regedit, etc. (about 10 in total). This is because when you call a program without the extension (.exe in this case) it executes the one with more precedence (.com haves more precedence than .exe), so when you try to execute one of this commands, it executes a dummy file, that does nothing.

Also as you have seen, it executes limewire every 15 seconds or so, so basically the computer begins to be full and slow.

THE SOLUTION (for me)

First, i changed the name of the Limewire was installed (to Limewir) so the virus could not execute limewire.

And easily enough, it was removed using Microsoft Anty Spyware Beta (last update). It detected the trojan and restored my taskman.exe file.

After that, i removed the .com copies(dummy's) of the command files the program installed.

And finally renamed my limewire folder and checked the shared folder to see if a file containing the trojan was created.

Maybe this can help you, i'm a Computer Systems Engineer and have experience with computer since i was 5, but this trojan was one of the most annoying things i have seen.

In internet you can find more information, using the name winupdates.exe and doing a google search.

Hi,

I think I have the same problem. Ive followed the instructions provided and I've copied taskmgr.exe, but its not allowing me to paste it to the desktop. What's wrong?

Also, I ran a search and found winupdates, so cant I just delete it?

Other people on here are also saying that Ctr-Alt-Del doesn't work, but for me it does.

This problem started this morning for me, and whe, I turned my computer on, I had to restore my active desktop, however I can't do that. When I clickon 'Restore my active desktop' nothing happens. Am I experiencing the same virus?

This is what I see when I press Ctr-Alt-Del:



EDIT: Also, what does this virus actually do? Is it just a really annoying few little things that can be aparently sorted, or are there more serious affects?

Hello, it seems that the virus is only annoying and it sends itself to other people when it makes copies of it in the shared folders of many p2p programs. Also i read that it connects with a web page (don't remember the page) and can download other trojans. At least it didn't manage to do some damage in my computer, but i don't know for certain if it can do something.

To remove winupdates you need to avoid it from loading when you restart your computer or to use anti spyware software (like Microsoft Anti Spyware beta) so they detect the trojan and remove it from memory.

It seems that it is the same virus, but i don't know about your problem with active desktop, it wasn't my case.

As i said before, using Anti Spyware, the virus was detected and removed and after that i remover the directories and files created by the virus(you can check them in my other post).

It's a very annoying trojan. It took me about 2 hours to remove it (i didn't know anything about it), but at least it didn't remove any files or made another type of damage.

I hope this helps you.

I started 2 follow the Task manager method etc. but their was no process called winupdates or any thing using 100% except for system idle process at 95% and i still kept getting the error message

wat do i do now?

I have gotten my task manager to open but no process other than system idle are using any of my cpu. I can't find the virus and now that I have uninstalled LimeWire my computer keeps trying to open it and it won't let it. How do I fix this? I have been trying now for the better part of three hours. I don't know what other process it could be other than winupdates.exe, which is not showing up. I am getting so frustrated with this and desperately need to know how to eradicate the problem before I can log off. Please any other advice?

Try using the Microsoft Antispyware as i said before. It was effective in my case, i only had the virus for about two hours and is very annoying as you say. Since i removed the virus, i haven't seen any problem related. Check my posts in this thread to see if they help you.

To update everyone - I recommend to surf through all threads related to this issue - you'll find different versions of this virus, different names (for me it was winlogi.exe (yes, without the "n" at the end )

just try to search the threads for virus or problem etc.

there's tons of stuff for this topic!

Lukas

Yes, as he says it seems that this virus(or trojan more correctly i thing) has many different names. But sometimes it only some common sense to see if there's a name in the taskman that seems suspicious or that you don't remember.

Doing a google search is useful at most times or use tools like Spybot, Microsoft AntiSpyware, WinTasks, Security Task Manager, etc that can help to identify possible virus and adware.

It's not to difficult to get rid of this annoying pest and thankful there's many information about how to do so, so you're not alone.

Ok, this same thing happened to me, but a different name was used for the crappy virus.
it was MsUpdate.exe
whoever made that stupid thing should jump out a window while lit on fire
btw that guy before was right. he should be applauded for all of that effort he took.

When you say that, does it mean like completely deleting it, so ALL of my shared files get deleted?? Because that is a hugge sacrifice for me :-)