Autorun Details: windowsupdate

Name: WindowsUpdate
Command: windows_update.exe
Status: Definitely not required. Usually Malware.
Description: Added by the LOFNI WORM!

Name: WindowsUpdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the ASTEF or RESPAN WORMS or AGENT-V TROJAN! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: windowsupdate
Command: RPC[RANDOM CHARACTERS].exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT.B TROJAN!

Name: WindowsUpdate
Command: USRINIT.EXE
Status: Definitely not required. Usually Malware.
Description: Added by the MADDIS.B WORM!

Name: windowsupdate
Command: winupdate.exe
Status: Definitely not required. Usually Malware.
Description: Added by the WARPI WORM!

Name: WindowsUpdate
Command: svchost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BDOOR-IK BACKDOOR! Note - this is not the legitimate svchost.exe process which should NOT appear in Msconfig/Startup!

Name: WindowsUpdate
Command: winnnint.exe
Status: Definitely not required. Usually Malware.
Description: Added by an unidentified WORM or TROJAN!

Name: WindowsUpdate
Command: [path to file]
Status: Definitely not required. Usually Malware.
Description: Added by the DUPA-B TROJAN!

Name: WindowsUpdate
Command: svchostw.exe
Status: Definitely not required. Usually Malware.
Description: Added by the NURECH TROJAN!

Name: WindowsUpdate
Command: Nzil.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CULLER-C WORM!

Name: WindowsUpdate
Command: Strad.exe
Status: Definitely not required. Usually Malware.
Description: Added by the CULLER-D WORM!

Name: Windowsupdate
Command: Windowsupdate.exe
Status: Definitely not required. Usually Malware.
Description: Added by the BANKER.ARK TROJAN!

Name: Windowsupdate
Command: wupdmgr98.exe
Status: Definitely not required. Usually Malware.
Description: Added by a variant of the IRCBOT BACKDOOR!

Name: WinDOwsUPdate
Command: smss.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AUTORUN.DIB WORM! Note - this is not the legitimate smss.exe process which is always located in %System% and should not normally figure in Msconfig/Startup! This one is located in a ~A~m~B~u~R~a~D~u~L~� subfolder

Name: windowsupdate
Command: autoupdate.exe
Status: Definitely not required. Usually Malware.
Description: Added by the IRCBOT-P BACKDOOR!

Name: WindowsUpdate
Command: svdhost.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGOBOT-BP WORM!

Name: WindowsUpdate
Command: twain.exe
Status: Definitely not required. Usually Malware.
Description: Added by the AGENT.BEA TROJAN!

Back to the autorun list

The autorun list is presented in association with Sysinfo.org

Our Tip: Emsisoft Anti-Malware - Best In Test!

Emsisoft Anti-Malware is the best of 19 tested antivirus programs - Test by MRG - Malware Research Group - June 2009
Read more about the test winner