what is WUpdMan32.exe

[rk]

today on starting my pc[compaq,xp with sp2]
zone alarm warned =WUpdMan32.exe is trying to access internet
what is it ,google has no info about it.
its location is=C:\Program Files\Common Files\Microsoft Shared\Web Components
is it some real program or virus,
also norton antivirus autoprotect is no longer working,
how to deal with it,
thx for any ideas?

 

[Choto Cheeta]

WUpdMan32.exe is trying to access internet

well it sounds like windows update... i am not sure... coz i have the V6 Microsoft update installed... so i cant check on my PC about previous updater program name... for now keep it running and give internet access to it... (wait till other members answer u some thing)

Better visit this *update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en-us web site 1st... install the updater 1st... then see whether that program still running or not...

also norton antivirus autoprotect is no longer working

well can be many reason...

1. Most common, Your subscription is over. buy new Subscription...
   
2. Its a Pirated product, in that case sorry we cant help here
   
3. Installation scruwed up... Better Reinstall the product, but 1st Uninstall it useing this Tool Norton Removal Tool beware, u need IE to run that tool....
   
4. Nothing Works... Then ask Norton guyess for help if u have original product, if pirated, then move to many good Free AVS like AVG or Avast....

Do wait for other replies too...

 

[rk]

everything is original because all is oem,but norton may not support as it is an oem of compaq/hp
and WUpdMan32.exe doesn't seems to be a component of windows update

 

[anandk]

just check up on the properties of this file. if it is associated with microsoft, could be safe, else could be malware. hope u have scanned ur pc in safe mode with ur av and anti-spy.

 

[Choto Cheeta]

everything is original

About NAV... may be those lazy HP service dudes needs a call to atten...

lol..

better call them up and ask what should u do about NAV...

and about the file... well do as what anandk says... get a good AntiSpy ware (may be SpyBot S&D will do) and scann ur PC properly...

 

[Theli93]

today on starting my pc[compaq,xp with sp2]
zone alarm warned =WUpdMan32.exe is trying to access internet
what is it ,google has no info about it.
its location is=C:\Program Files\Common Files\Microsoft Shared\Web Components
is it some real program or virus,
also norton antivirus autoprotect is no longer working,
how to deal with it,
thx for any ideas?

I have found the same item on my system [HP, XPmce - completely updated] Kaspersky Anti-Virus has identified it as follows:

Infected: Trojan program Trojan-Spy.Win32.Agent.mz
C:\Program Files\Common Files\Microsoft Shared\Web Components\WUpdMan32.exe
152 KB

Kaspersky can be fairly aggressive, but the fact that I can find nothing on this program anywhere but here is suspicious, to say the least. If this were any kind of common component there would undoubtedly be significantly more information available.

As such, I have allowed Kaspersky to delete it. If I encounter any problems as a result, I'll report back.

 

[rk]

well hp has no idea about this file,they suggested to use restore cd
which i didn't wanted
so i deleted this file manually and removed norton
and installed avast from their website
norton is now becoming useless ,they tie up with oem's and give eveyone nortonav

and thx Theli93, for clarifying abot file because i was also suspecting it as trojan..

 

[blueshift]

today on starting my pc[compaq,xp with sp2]
zone alarm warned =WUpdMan32.exe is trying to access internet
what is it ,google has no info about it.
its location is=C:\Program Files\Common Files\Microsoft Shared\Web Components
is it some real program or virus,

WUpdMan32.exe =>Windows Update Manager
So clearly its not a virus at all. Its a system file. This file is not needed unless u update your XP regularly.
And the reason ZA is giving warning simply because your XP needs to be updated or you have turned on Automatic update.

Completely Disable your Automatic Updates. (Right Click My Computer then goto Properties. Then in the Automatic updates tab, turn it off.). Restart.
I guess ZA will not show the message any longer.

 

[Theli93]

WUpdMan32.exe =>Windows Update Manager
So clearly its not a virus at all. Its a system file. This file is not needed unless u update your XP regularly.
And the reason ZA is giving warning simply because your XP needs to be updated or you have turned on Automatic update.

Completely Disable your Automatic Updates. (Right Click My Computer then goto Properties. Then in the Automatic updates tab, turn it off.). Restart.
I guess ZA will not show the message any longer.

Thanks Blueshift,

I guess I'm not surprised that an HP "phone tech" might not be aware of this, but why does this windows component not show up in most any search engine anywhere on the web (except here, obviously)? In my experience this is highly unusual! I have yet to find a normal windows component that there is not a VERY LARGE amount of repetative information residing on the web, most especially when it is geting flagged by a program as common as ZoneAlarm.

As aggressive as Kaspersky is, I have never had it flag a windows component, just some other new/obscure programs and valid hazards.

Thanks again.

 

[rk]

blueshift windowsupdate is disabled but this file was trying to access internet,
also there was no sign of microsoft in it.

 

[Vishal Gupta]

Did u install "Registry First Aid" s/w recently???

 

[blueshift]

blueshift windowsupdate is disabled but this file was trying to access internet,
also there was no sign of microsoft in it.

Actually I still have SP1 installed here. So don't know much about what SP2 has installed more in ur pc. I have wupdman.exe file in my system32 folder. So i had assumed tht SP2 must have installed this file in different dir.sorry.
Does this happen everytime u boot? Check if theres eentry in the startup.
Search for the file and delete its extension. So it would remain as backup on ur pc and will not run everytime. Before you do this remove any running process of this file using TaskManager.

 

[ELITE]

WUpdMan32.exe =>Windows Update Manager

I dont think so, this seems to be new malware , my proxy settings are being changed, I had disabled windows UPDATE as well as disabled the update service,this thing apperead on my computer after Zango (Spyware/Adware) got installed on my computer.

 

[anandk]

get that file checked with multiple anti-virus programs at
*virusscan.jotti.org/
or
*www.virustotal.com/en/virustotalf.html

 

[nomad]

WUpdMan32.exe =>Windows Update Manager
So clearly its not a virus at all. Its a system file. This file is not needed unless u update your XP regularly.
And the reason ZA is giving warning simply because your XP needs to be updated or you have turned on Automatic update.

Completely Disable your Automatic Updates. (Right Click My Computer then goto Properties. Then in the Automatic updates tab, turn it off.). Restart.
I guess ZA will not show the message any longer.

Hi everyone....

Just to cut in briefly - I found myself in the same situtation, Automatic update is disabled but WUPDMAN.EXE appeared via ZoneAlarm, trying to connect.
By checking the IP address that it tried to connect to I found out the following (via WHOIS):

WHOIS Record For
66.249.93.99
Record Type: IP Address


OrgName: Google Inc.
OrgID: GOGL
Address: 1600 Amphitheatre Parkway
City: Mountain View
StateProv: CA
PostalCode: 94043
Country: US

NetRange: 66.249.64.0 - 66.249.95.255
CIDR: 66.249.64.0/19
NetName: GOOGLE
NetHandle: NET-66-249-64-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.GOOGLE.COM
NameServer: NS2.GOOGLE.COM
Comment:
RegDate: 2004-03-05
Updated: 2004-11-10

OrgTechHandle: ZG39-ARIN
OrgTechName: Google Inc.
OrgTechPhone: +1-650-318-0200
OrgTechEmail: arin-contact@google.com

I had had google toolbar installed up until yesterday, so... go figure

 

[rk]

I had had google toolbar installed up until yesterday, so... go figure

nomad, i never installed google toolbar in my pc
maybe trojan is faking google

 

[ELITE]

nomad, i never installed google toolbar in my pc
maybe trojan is faking google

I am 100% sure it is not related to Google, Maybe itis a PPC trojan.

 

[nomad]

I am 100% sure it is not related to Google, Maybe itis a PPC trojan.

My bad, my bad...

It is a trojan gentlemen.
NOD32 calls it: Win32\Spy.Agent.MT trojan.