Trojan-'wuredir.cab.bak'

[yddraigoch]

During startup of Windows XP, Norton regulary checks the above. According to various sites on the internet it is a Trojan.
Can anyone recommend a way of removing it. My AVG (free edition) has not highlighted it.

[ljcomp]

Hi Mate

According to various sites on the internet it is a Trojan.

What website/s say it's a trojan

I would say its a backup, hence the .BAK extension.
Of a required Windows update file

You should find the original .CAB file in C:\Windows\SoftwareDistribution\WuRedir\load of letters and numbers

load of letters and numbers above will be different to mine, but looks something like this 9482F4B4-E343-43B6-B170-9A65BC822C77

You can do a search for wuredir.cab to verify you have it.

Then search for wuredir.cab.bak and then DELETE it.

Don't forget to empty that file from your recycle bin.

This in my opinion and error on nortons part, and AVG may well be correct

However if you have read somewhere it's a trojan, I would like to read what they have to say, before commenting further.

LJ

[rontomuk]

Originally Posted by ljcomp

Hi Mate


What website/s say it's a trojan

I would say its a backup, hence the .BAK extension.
Of a required Windows update file

You should find the original .CAB file in C:\Windows\SoftwareDistribution\WuRedir\load of letters and numbers

load of letters and numbers above will be different to mine, but looks something like this 9482F4B4-E343-43B6-B170-9A65BC822C77

You can do a search for wuredir.cab to verify you have it.

Then search for wuredir.cab.bak and then DELETE it.

Don't forget to empty that file from your recycle bin.

This in my opinion and error on nortons part, and AVG may well be correct

However if you have read somewhere it's a trojan, I would like to read what they have to say, before commenting further.

LJ

Hi Lyndon

What you state above is what I read on another site here is a copy of their reply

Re the "wuredir.cab.bak" problem.
wuredir.cab is a legitimate Microsoft file created from MS Update site....but the wuredir.cab.bak file is not needed.
If you can find the wuredir.cab.bak file... delete it. ( MAKE SURE YOU CAN SEE HIDDEN FILES and FOLDERS),
It may be in the C:\WINDOWS\SoftwareDistribution\WuRedir folder, under a sub-folder with a long alphanumeric name.
If you find it there, and it wont delete, let us know.

Cheers