Go Back   PCMech Forums > Windows Support > Windows Legacy Support (XP and earlier)

Need Some Help? Type Your Keywords Here:

Reply
 
LinkBack Thread Tools Search this Thread Rate Thread Display Modes
Old 05-02-2004, 07:36 PM   #1
Member (14 bit)
 
bailey's Avatar
 
Join Date: Mar 1999
Location: Christmas, Florida
Posts: 10,661
help

it seams that there is a file in my system that don't belong there

in the windows sys32 folder there is a file called
wuauclt.exe

and it looks like it is a trojan virus - cult-B

when I delete it , it comes right back
how do I get rid of this
searched everywhere and could not find any help/
bailey is offline   Reply With Quote
Old 05-02-2004, 07:53 PM   #2
Member (5 bit)
 
Join Date: Jan 2004
Location: yonkers,ny
Posts: 22
use anti-virus and/or ad-ware software. There are some free ones out. Spybot is a good free Ad-ware remover.
pizzaboy089 is offline   Reply With Quote
Old 05-02-2004, 08:01 PM   #3
Member (10 bit)
 
Join Date: Mar 2004
Location: California
Posts: 936
do you have windows me

wuauclt - wuauclt.exe - Process Information
Process File: wuauclt or wuauclt.exe
Process Name: AutoUpdate for WindowsME
Description: Background process responsible for updates to Windows ME. Whenever you connect to the Internet, Wuauclt checks the Microsoft web site for updates to Windows ME.
Company: Microsoft Corp.
System Process: Yes
Security Risk ( Virus/Trojan/Worm/Adware/Spyware ): No
Common Errors: N/A

if you dont have windows me

have you tried deleting it in safe mode
Lobos is offline   Reply With Quote
Old 05-02-2004, 08:02 PM   #4
Folding For PCMech
 
Join Date: Jun 2003
Location: San Dimas, CA
Posts: 3,136
Don't know if you tried this yet bailey:

http://www.sophos.com/virusinfo/analyses/trojcultb.html
bigandy is offline   Reply With Quote
Old 05-02-2004, 08:17 PM   #5
Member (14 bit)
 
bailey's Avatar
 
Join Date: Mar 1999
Location: Christmas, Florida
Posts: 10,661
Quote:
Originally posted by bigandy
Don't know if you tried this yet bailey:

http://www.sophos.com/virusinfo/analyses/trojcultb.html
thats the only site that had anything on it but I can't buy there software

I tried everything else, but it comes back as soon as I delete it, also its removed from the reg already.
but it won't go away.

no I have never had ME

I always run spybot and adware

none of the anti-virus programs detect it eather.
bailey is offline   Reply With Quote
Old 05-02-2004, 08:21 PM   #6
Member (10 bit)
 
Join Date: Mar 2004
Location: California
Posts: 936
try this

http://www.snapfiles.com/get/moveonboot.html
Lobos is offline   Reply With Quote
Old 05-02-2004, 08:33 PM   #7
Member (14 bit)
 
bailey's Avatar
 
Join Date: Mar 1999
Location: Christmas, Florida
Posts: 10,661
Quote:
Originally posted by Lobos
try this

http://www.snapfiles.com/get/moveonboot.html
no good still keepd comming back by its self.
bailey is offline   Reply With Quote
Old 05-02-2004, 08:39 PM   #8
Member (12 bit)
 
Markoman01027's Avatar
 
Join Date: Jul 2002
Location: Easthampton, Massachusetts
Posts: 2,633
I have that file to on my system, one is in system 32 folder and one in servicepackfiles and it appears to be a windows update thing.

no scanners show this as a virus or trojan
Markoman01027 is offline   Reply With Quote
Old 05-02-2004, 08:43 PM   #9
glc
Forum Administrator
Staff
Premium Member
 
glc's Avatar
 
Join Date: May 2000
Location: Joplin MO
Posts: 37,794
It's a windows update thing, not malware.
glc is offline   Reply With Quote
Old 05-02-2004, 08:45 PM   #10
Member (11 bit)
 
Blue_Gundam2002's Avatar
 
Join Date: May 2003
Location: Houston, Texas
Posts: 1,340
Send a message via AIM to Blue_Gundam2002 Send a message via Yahoo to Blue_Gundam2002
I have it in my system32 and SP folders. Why exactly do you think it doesn't belong there?
Blue_Gundam2002 is offline   Reply With Quote
Old 05-02-2004, 08:56 PM   #11
Folding For PCMech
 
Join Date: Jun 2003
Location: San Dimas, CA
Posts: 3,136
I do too, how bout that . I saw a site that said that, but it only mentioned ME, and I was pretty sure bailey isn't running ME.
bigandy is offline   Reply With Quote
Old 05-02-2004, 09:05 PM   #12
Member (14 bit)
 
bailey's Avatar
 
Join Date: Mar 1999
Location: Christmas, Florida
Posts: 10,661
I am told that because it is the update program for wME and that its not supposed to be in xp. but I do not know for sure eather way.
thats why I was trying to find out
bailey is offline   Reply With Quote
Old 05-03-2004, 02:26 AM   #13
Member (12 bit)
 
andyms18a's Avatar
 
Join Date: Dec 2002
Location: essex
Posts: 2,252
wuauclt.exe is part of xp i have it on all my xp computers in sys32 folder and the sp1 i386 folder
__________________
Join the PcMech.com Folding@Home Team and Help Save Lives! Click Here!
Life only looks greener on the other side of the fence
andyms18a is offline   Reply With Quote
Old 05-03-2004, 09:26 AM   #14
Member (14 bit)
 
bailey's Avatar
 
Join Date: Mar 1999
Location: Christmas, Florida
Posts: 10,661
I agree that its belongs there and is not a trojan, but it did have me wondering
I just had to double check with you guys, as yous do know more than I do about this stuff.

thanks for the replys
bailey is offline   Reply With Quote
Reply

Bookmarks

Still Need Help? Type Your Keywords Here:


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is On
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -5. The time now is 08:11 PM.
Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2012, vBulletin Solutions, Inc.
SEO by vBSEO 3.6.0 PL2