It is possible that windows BITS service was being used to attempt to download more malware. Some virtumonde, AP Holding, and other very closely related adware Trojans do this
The application data folder is hidden so you will need to enable showing of hidden/system files from within folder options in your control panel
Once done that...
Open a command prompt & type the following commands hitting enter after each:
net stop bits
cd "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader" (without quotes)
ren *.dat *.old
net start bits
exit
The above will do the following:
First stops BITS service so any download jobs in queue by Windows update, malware, or anything else is stopped. (you should get success message on the first command. If it tells you service not running – continue anyway)
Next we are renaming the actual BITS job files to make them unable to run
Then you can restart BITS service (should get success message)
At this point 2 new BITS job files are created & will re-populate normally with the legit jobs
This may take a bit of time – depending on schedule of the original download/update jobs
Let me know if this helps
The application data folder is hidden so you will need to enable showing of hidden/system files from within folder options in your control panel
Once done that...
Open a command prompt & type the following commands hitting enter after each:
net stop bits
cd "C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader" (without quotes)
ren *.dat *.old
net start bits
exit
The above will do the following:
First stops BITS service so any download jobs in queue by Windows update, malware, or anything else is stopped. (you should get success message on the first command. If it tells you service not running – continue anyway)
Next we are renaming the actual BITS job files to make them unable to run
Then you can restart BITS service (should get success message)
At this point 2 new BITS job files are created & will re-populate normally with the legit jobs
This may take a bit of time – depending on schedule of the original download/update jobs
Let me know if this helps
