Patch.exe-Is this a Virus?

[Guest]

Yesterday I downloaded sever "non-critical" updates from
the Microsoft website. In the process of installation
McAfee raised a virus alert. I completed the
installations and ran a complete system scan. It found
something it calls Patch.exe with the name memory name "morphine" in
the windows system 32 folder and in the regular system
folder. I quarantined the files, sent one to McAfee's Avert Service, deleted themfrom quarantine, turned off
system restore, shut down and rebooted. I got the same
alert again and sure enough there it was in the windows
system32 folder. With Restore still disabled I went
through the procedure again and again it came back. The thing is, while Viruscan 8 is
finding this Avet tells me they don't find suspicious
coding in the file I sent them. I can't find Morphine or
Patch.exe on Norton or McAfee websites. Cany anyone tell
me what is going on here? If it is a virus how do I make it go away? Everytime I delete it, it comes back
Alic

 

[dev]

/AliceH/ said:

Yesterday I downloaded sever "non-critical" updates from
the Microsoft website. In the process of installation
McAfee raised a virus alert. I completed the
installations and ran a complete system scan. It found
something it calls Patch.exe with the name memory name "morphine" in
the windows system 32 folder and in the regular system
folder. I quarantined the files, sent one to McAfee's Avert Service, deleted themfrom quarantine, turned off
system restore, shut down and rebooted. I got the same
alert again and sure enough there it was in the windows
system32 folder. With Restore still disabled I went
through the procedure again and again it came back. The thing is, while Viruscan 8 is
finding this Avet tells me they don't find suspicious
coding in the file I sent them. I can't find Morphine or
Patch.exe on Norton or McAfee websites. Cany anyone tell
me what is going on here? If it is a virus how do I make it go away? Everytime I delete it, it comes back!

Perhaps this is the problem...
http://www.updatexp.com/dumaru-a.html

 

[Guest]

Thanks Dev
Read the profile you sent me to but I don't think that is the problem. If it were McAfee should have been able to successfully remove it. Also, the name is different. McAfee calls it morphine.