Googleupq.exe, rundll29.exe

Last Updated on Tuesday, 18 September 2012 17:48 Wednesday, 18 August 2010 15:26

Worm - Ackantta

Files by the names Googleupq.exe, rundll29.exe are created by a computer virus program that affects the computers running on the Microsoft windows operating systems. It's analysis report is given below

Files - view
C:\Windows\System32\Googleupq.exe, rundll29.exe
%AppData%\SystemProc\lsass.exe

(Full path for the short folder names)

This virus stops the services
"Error Reporting service" and "Security Center".
Creates a malicious look alike of lsass.exe

There may be more files created by this virus program. You can find them out. First locate and note down the "date of creation" of Googleupq.exe, rundll29.exe, and after that, search the hard disk for other files created on that date or onward. See image

Necessary steps required to remove this virus program

• To remove processes created by the virus program from the Task Manager
• To search and delete files created by the virus program from the hard disk. Enable to view "hidden files and folders" before you search. Otherwise files created by the virus program inside the hidden folders will not be found
• To remove obsolete registry keys using CCleaner