Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

A Bit Confused


  • Please log in to reply
2 replies to this topic

#1 boopme

boopme

    To Insanity and Beyond


  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:59 AM

Posted 07 March 2007 - 10:36 PM

I was looking at a post where the file wuauclt.exe is mentioned as unknown to the poster. A search in 'Startup List" finds it as Malware ... http://www.bleepingcomputer.com/startups/
A google search brings result of it being part of Windows Update
http://www.processlibrary.com/directory/files/wuauclt/

to a trojan in many places. To part of an MS error message
http://support.microsoft.com/kb/312477

What would be needed,the full path, to determine its status. I realize that if you get it from the error message it's dealt with in that manner.
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook

BC AdBot (Login to Remove)

 


#2 Grinler

Grinler

    Lawrence Abrams


  • Admin
  • 43,504 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:06:59 AM

Posted 08 March 2007 - 01:57 PM

You need to compare the path, the startups name etc. The real file is in the %System% folder. If its anywhere else, it is fake.

Also I don't believe wuauclt.exe is a startup, but gets launched from other programs. (could be wrong on older versions of windows) So if it is starting up from an automatic startup, it's most likely a infection.

#3 boopme

boopme

    To Insanity and Beyond

  • Topic Starter

  • Global Moderator
  • 72,934 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:NJ USA
  • Local time:06:59 AM

Posted 08 March 2007 - 04:38 PM

thank you Grinler,clearer now
How do I get help? Who is helping me?For the time will come when men will not put up with sound doctrine. Instead, to suit their own desires, they will gather around them a great number of teachers to say what their itching ears want to hear....Become a BleepingComputer fan: Facebook




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users