A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

wuauclt.exe in Task Manager



 
 
Thread Tools Display Modes
  #1  
Old August 11th 04, 03:19 AM
Ummagumma
external usenet poster
 
Posts: n/a
Default wuauclt.exe in Task Manager

OS: XP Home Edition

Around 10 A.M. today (10 August), while browsing, I
noticed a lot of disk activity that seemed to be
associated with the process wuauclt.exe. I assumed that
an automatic update was being downloaded. However, I was
never prompted to install an update, and the Windows
Update site showed that my last update was downloaded on
1 August.

I haven't noticed any performance problems, in fact the
only thing that I noticed is that the appearance of the
Windows Update site has changed. My anti-virus software
scan reported nothing.

Comments?
Ads
  #2  
Old August 11th 04, 04:09 AM
Ummagumma
external usenet poster
 
Posts: n/a
Default Correction: wuauclt.exe to wuaudt.exe

Upon closer examination, Task Manager reports wuaudt.exe,
not wuauclt.exe.
-----Original Message-----
OS: XP Home Edition

Around 10 A.M. today (10 August), while browsing, I
noticed a lot of disk activity that seemed to be
associated with the process wuauclt.exe. I assumed that
an automatic update was being downloaded. However, I

was
never prompted to install an update, and the Windows
Update site showed that my last update was downloaded on
1 August.

I haven't noticed any performance problems, in fact the
only thing that I noticed is that the appearance of the
Windows Update site has changed. My anti-virus software
scan reported nothing.

Comments?
.

  #3  
Old August 11th 04, 02:58 PM
Doug Knox MS-MVP
external usenet poster
 
Posts: n/a
Default Correction: wuauclt.exe to wuaudt.exe

Please be sure that your "correction", is correct. WUAUCLT.EXE is =
associated with the Cult-B trojan.

http://www.sophos.com/virusinfo/analyses/trojcultb.html
http://securityresponse.symantec.com...door.clt.html=


--=20
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"Ummagumma" wrote in message =
...
Upon closer examination, Task Manager reports wuaudt.exe,=20
not wuauclt.exe.
-----Original Message-----
OS: XP Home Edition

Around 10 A.M. today (10 August), while browsing, I=20
noticed a lot of disk activity that seemed to be=20
associated with the process wuauclt.exe. I assumed that=20
an automatic update was being downloaded. However, I=20

was=20
never prompted to install an update, and the Windows=20
Update site showed that my last update was downloaded on=20
1 August. =20

I haven't noticed any performance problems, in fact the=20
only thing that I noticed is that the appearance of the=20
Windows Update site has changed. My anti-virus software=20
scan reported nothing.

Comments?
.

  #4  
Old August 20th 04, 02:49 PM
Bishop772
external usenet poster
 
Posts: n/a
Default wuauclt.exe in Task Manager

I have the same exact thing. Take a real close look at the process listing,
a 'c' and a 'l' together, look very much like a 'd'. I notice that Symantec
lists it as a Trojan:
http://securityresponse.symantec.com...kdoor.clt.html

However, I notice the process only starts running after I visit the Windows
Update site! Also, after a large amount of bytes transferred, it tries to
install what looks like a Microsoft Works update (Word 2002), asking me for
the original disk. Perhaps the 'wu' stands for Works Update and not Windows
Update. Anyway, I followed the instructions on the Symantec site - turning
off Restore, running a full system scan, and editing registry item. The
system scan found no such trojan file, and there is no such registry item.

However, the fact that the process only starts after visiting Windows Update
site, in addition to the fact that I read Microsoft recently updated Works,
leads me to believe that something else is going on here, probably just a
Works Update coming through the Windows Update site, since we all have been
told to set our computers to automatically download and update.

Possible??


"Ummagumma" wrote:

OS: XP Home Edition

Around 10 A.M. today (10 August), while browsing, I
noticed a lot of disk activity that seemed to be
associated with the process wuauclt.exe. I assumed that
an automatic update was being downloaded. However, I was
never prompted to install an update, and the Windows
Update site showed that my last update was downloaded on
1 August.

I haven't noticed any performance problems, in fact the
only thing that I noticed is that the appearance of the
Windows Update site has changed. My anti-virus software
scan reported nothing.

Comments?

 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Thanks Doug--A very useful program you wrote. Chad Harris Customizing Windows XP 0 July 29th 04 02:04 AM
Ctrl+Alt+Delete vs. Ctrl+Shift+Escape and Task Manager Chad Harris Customizing Windows XP 0 July 27th 04 04:50 AM
Ctrl+Alt+Delete vs. Ctrl+Shift+Escape and Task Manager Chad Harris Customizing Windows XP 0 July 27th 04 04:45 AM
Ctrl+Alt+Delete vs. Ctrl+Shift+Escape and Task Manager Chad Harris Customizing Windows XP 0 July 27th 04 04:45 AM
Ctrl+Alt+Delete vs. Ctrl+Shift+Escape and Task Manager Chad Harris Customizing Windows XP 0 July 27th 04 04:45 AM






All times are GMT +1. The time now is 01:19 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.