Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

is windowsupdate.com legit?


  • Please log in to reply
12 replies to this topic

#1 puravida999

puravida999

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 14 July 2015 - 11:53 AM

I update the software avast 2015 free edition, and upon restarting my pc (to finish the update) I got this message from my antivirus

 

rcvTSPh.png

 

it basically says the file is not common among avast users, I got like 7 times this window with different files names, all of them room is windowsupdate.com , is this the legit windows update site? where it says "firmado por" means the signature of the coorporation which is blank, thanks


Edited by puravida999, 14 July 2015 - 11:54 AM.


BC AdBot (Login to Remove)

 


#2 JerkyMcDilerino

JerkyMcDilerino

  • Banned
  • 241 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:11:16 AM

Posted 14 July 2015 - 02:07 PM

https://www.virustotal.com/en/url/a9b82ba7e27bd7e03e595cde475ddde06dccdec3a5c658c6ab761d98521a47e7/analysis/1436900886/

 

0/63 detection.


Edited by JerkyMcDilerino, 14 July 2015 - 02:08 PM.


#3 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:04:16 PM

Posted 14 July 2015 - 02:45 PM

This is the Whois for windowsupdate.com. Since it belongs to Microsoft I'd say it is legit.

There was an issue with Avast and Norton detecting Windows Update, but these were false positives and has been rectified since.

#4 FakoktaNetworkPerson

FakoktaNetworkPerson

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:16 AM

Posted 14 July 2015 - 03:43 PM

giphy.gif

I cannot believe that Avast is still flagging WindowsUpdate.com as malicious. 



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,288 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:16 AM

Posted 15 July 2015 - 05:43 AM

You can always check with...
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 16 July 2015 - 04:45 PM

This is the Whois for windowsupdate.com. Since it belongs to Microsoft I'd say it is legit.

There was an issue with Avast and Norton detecting Windows Update, but these were false positives and has been rectified since.

hi, I just got a reply from microsoft support engineer and he says the link is not legitimate :/



#7 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:04:16 PM

Posted 16 July 2015 - 04:46 PM

Did you send a question to a Microsoft support engineer? I'd like to see it if it is on a public forum of some kind.

#8 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 16 July 2015 - 05:22 PM

Was on windows forums and this is http://answers.microsoft.com/en-us/windows/forum/windows8_1-windows_update/mrtexe-virus-and-windows-update-problems/1471f5ff-9395-4fd0-991c-a50a125d9941



#9 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:04:16 PM

Posted 16 July 2015 - 05:25 PM

In that case I would recommend you follow his advice. Best to have only one active thread at a time :)

#10 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 16 July 2015 - 05:36 PM

I just wanted to confirm it was a legit link but thanks anyways



#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,288 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:11:16 AM

Posted 16 July 2015 - 05:49 PM

For me, the http://www.windowsupdate.com link, redirects to

http://www.update.microsoft.com/windowsupdate/v6/thanks.aspx?ln=en&&thankspage=5
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 puravida999

puravida999
  • Topic Starter

  • Members
  • 61 posts
  • OFFLINE
  •  
  • Local time:08:16 AM

Posted 16 July 2015 - 06:17 PM

oh, I havent entered the site, thanks for testing. I'm still waiting for the support engineer to reply why whois.com shows it belongs to microsoft coorporation. I already scanned my pc and no virus found (also malwarebytes). 

 

After this was detected the next day I checked for updates and got no problem, just want to make sure this site detected by avast was false positive.


Edited by puravida999, 16 July 2015 - 06:17 PM.


#13 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,672 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:16 PM

Posted 17 July 2015 - 03:06 PM

 

This is the Whois for windowsupdate.com. Since it belongs to Microsoft I'd say it is legit.

There was an issue with Avast and Norton detecting Windows Update, but these were false positives and has been rectified since.

hi, I just got a reply from microsoft support engineer and he says the link is not legitimate :/

 

 

He made an error, look at his later post:

 

 

Hi,

 

Sorry for the inconvenience. www.windowsupdate.com is a legitimate website.

 

Thank you.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2018
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users