$PARASITEID = '100363'; ?>
Are you confused about the difference between wuauclt.exe and wuaudt.exe?
The two executable files wuauclt.exe and wuaudt.exe are the same processes. Part of the confusion is that when both “wuauclt.exe” and “wuaudt.exe” are in lowercase they look very similar. The letters “cl” look like a letter “d” depending on the way windows is setup to display your text such as having anti-aliasing text enabled.
What does the wuauclt.exe and wuaudt.exe file do?
The process wuauclt.exe can be a legitimate Windows Update process file or it can be a Trojan. The running process wuauclt.exe is an AutoUpdate process for Windows in its legitimate form. It runs in the background to check for updates whenever you are connected to the internet.
In the form of a Trojan wuauclt.exe or wuaudt.exe can perform various malicious activities on your computer from logging your account information to creating annoying popup advertisements. It is recommended to use a good spyware scan tool so it may identify wuauclt.exe or wuaudt.exe as a legitimate Windows process or a Trojan. Usually when wuauclt.exe or wuaudt.exe are in the form of a Trojan it is the Cult-B or Backdoor.Clt Trojan part of the W32.Cult group of Trojans. It is known to infect Windows 95, Windows 98, Windows ME, Windows 2000, Windows NT and Windows XP.
PC Tip: Hackers use common process file names such as wuauclt.exe or wuaudt.exe to mask a malicious file. Wuauclt.exe and wuaudt.exe happen to be the same type of file with different spellings. This gives hackers an easy outlet to fool users who are able to identify suspicious processes running on their computer. In our previous article on How To Investigate Windows Processes you can find out ways to decipher if a running process is legitimate or not. An easy way to determine if the wuauclt.exe or wuaudt.exe processes are Trojans is by disabling Automatic Updates. If one of the two files is still present in your running processes after Automatic Updates is shut off then it may be a Trojan file.
Steps to turn off Automatic Updates
- Go to the Start menu
- Select Run
- Type in services.msc
- Press enter
- Right Click Automatic Updates
- Go to Properties
- Select Disable as the startup type
- Click OK
If you suspect that a running process file is a Trojan you can search the www.spyware-techie.com website for the associated Trojan for removal.