PDA

View Full Version : Remove wuauclt.exe (WXP-Pro)


foamgod
08-18-2004, 06:52 AM
I really don't know what happened. I have been "doing nothing" and suddenly I find this process running on my PC. It is for ME but I am using XP. How did it even get started in the first place?

How can I disable it? I can't seem to find it in services.

Process File: wuauclt or wuauclt.exe
Process Name: AutoUpdate for WindowsME
Description: Background process responsible for updates to Windows ME. Whenever you connect to the Internet, Wuauclt checks the Microsoft web site for updates to Windows ME.
Company: Microsoft Corp.
System Process: Yes
foamgod
08-18-2004, 06:54 AM
This is so creepy. One moment it was there, the next (after I finished typing the previous post), it was gone!

I am very sure I "off" no things while typing the previous post.

Can someone be nice to tell me what happened?
CrazyCanuck
08-19-2004, 04:55 AM
1 Question.....

Did you upgrade from WINME or WIN98 to XP on this unit.
or
Did you install XP on top as a full install? without doing an FFR (Fdisk, Format Reload)


Here are some directions:

If you did an upgrade then consider reloading clean and when it asks to verify product upgrade ownership insert your ME or 98(se) cd to prove your allowd to upgrade,

IF NOT then you could have a Trojan installed:
READ ON HERE:

http://securityresponse.symantec.com/avcenter/venc/data/backdoor.clt.html

Well seems i cant post a hyperlink to url.
Cut and past the address i left in blank area to web browser address line.

Good luck,

I believe you may have a trojan.

<P ID="edit"><FONT class="small">Edited by CrazyCanuck on 08/19/04 04:06.</FONT></P>
foamgod
08-19-2004, 07:33 AM
My OS was ME... but that was years back...

I went to the website to check out this trojan. I don't think my PC is infected because:
(1) I have done scans using Norton, McAFee and AVG. Nothing was detected.
(2) My registry was not amended like stated on the website.
(3) I have no wuauclt.exe in C:\WINDOWS\system. But please let me clarify: C:\WINDOWS\system is NOT the same as C:\WINDOWS\system32 right? Because the file does exists in C:\WINDOWS\system32....