| All comments about wuauclt.exe: |
 E. C. Griffin | It is as Microsoft file that is a part of the "Background Intelligent Transfer Service". As part of Microsoft's revamped methodology for retrieving "critical security updates" from their website, this file is automatically installed onto your system. If you remove it, you will just have to reinstall it if you want to obtain critical updates from Microsoft's site. |
| amg | If any other file with this name is located elsewhere than in system32 or in sevice pack files, it could be an malicious program. The service will start randomly even if autoupdate is stopped. Otherwise, it seems to be another windows "trick" in way that they didn't inform about this service wich surely came with an pre-sp2 hotfix or something like this. See also: Link |
 steven laube | ran a search in windows no such file |
| leki | the size in my pc is 148kb |
 Rich Epstein | There's a file called -AUMAGIC that has associated itself with WUAUCLT.EXE in the setupapi.log that changes directories often. I found it by reviewing my firewall logs. That is very suspect. No files found by that name, though. Did however find it in registry as an Explorer toolbar. So it's likely adware. Deleting it causes problems with AutoUpdate. |
| eric | I found two, one is under Service Pack Files |
 robin ballard | If you're not running windows 9x, this file shouldn't be in your system! |
 Uwe Böhnke | Bei Windows ME befindet sich wuauclt.exe in c:\windows und nicht in c:\windows\system32. Siehe auch die Microsoft-Website. See also: Link |
| Busy | I keep my computer very clean, and this process was running while I was downloading SP2. I actually looked up this one to make sure it was the right process for updater. It is. |
| Common Sense | This is a windows file. It IS the automatic update process. |
| Will | I found three .exe files by running a search... One of them was in System32, one in I386 and one in "c:\Software distribution\download\S-1-5-18\(bunch of numbers)\backup |
| Athanon | I have a file wuauclt.exe-399A8E72.pf in my windows\prefetch folder, is this a problem or is it needed by wuauclt.ext? |
| Shawn | it does automatic windows updates, unless you've completely disabled automatic updates, it should be running at all times. See also: Link |
| d3d | There are two in my XP SP1 system32 folder, both for automatically updating windows. You will get this file if you allow any of the new v5.windowsupdate.microsoft.com ... digital certificates to install on your PC. Don't use autoupdate, manually update. If you have the misfortune of installing this, delete it and rename the old (wuauclt[1]) file again. See also: Link |
| Jared Mayer | I had it. I saw it when I started up Win XP. After 10 mins it disappeared and my spyware and adware did not pick it up. Doesn;t look dangerous |
| ^DaNi | File Size: 112KB (c:\windows\system32) and the other 139KB (C:\windows\servicepackfiles\i386) -WINXP- |
| Doraemon | The process can be ensured that by stop the 'Automatic Updates' Service. |
| delro | it might be a file for the v5 updater for windows xp waiting for service pack 2 |
| Mark | I just downloaded some updates, including the new autoupdater..which i have turned off. I noticed this as a new active process. I began to look on the internet and have no concerns that it is a trojan. However, I don't like yet another process running. |
 Sujith | Have it in my machine under system32. Itz a 112 kb file. I also found the same file inexistence as wuauclt1.exe under system32, filesize - 164kb. |
| ssybesma | - |
| V-Hunter/Extractor/Collector | All Current updates. Original file is MS Windows Update service. I've disabled auto updates & it still loads in/out , when it does it interrups sound video & CPU intensive apps then exits returning control to system. The fact that it strobes raises questions in that it behaves much lika a proxy service sending/receiving data approx very 3 minutes or so. I would delete local file & extract/reload originals from XPSP1 CD then do a MS Win update online See also: Link |
| dr92060 | Auto update file. Common sence tells you it can be perceived as adware by most "anti "software Just like many other auto update files, for software. Be careful what you get rid of, to avoid problems. but at the same time, dont be afraid to ask the questions. Knowledge is the key. Also there are many browser helpers you use with software IE. DAP and others can be seen as adware but its simply part of the programs you use everyday. |
| | The original file from Microsoft gets placed in the Located at C:\WINDOWS\System32\wuauclt.exe . If you find it anywhere else then you should be suspicious for sure. |
| Ace | WUAUCLT could be a trojan i am working to see what it can be on my 2 pcs in sophos.com the say it is one and if it keeps running in the taskbar and the meter stays at 0% it is definitly a trojan, try to stop it from the task manager if it stops and then come back its a trojan Peace out |
| wiser | after a MS security-update (for sp2) this little application shows a popup dialog which asks me to restart my computer. I press "restart later" but the f***** pop up window shows every 5 minutes. After killing the wuauclt process "s.o." starts it again only seconds later. |
| V-Hunter/Extractor/Collector | Cut & Paste the URL into your browser manually since SARC does not allow external website hot-linking to their resources- sorry didn't see that coming until I tested the URL link. Also goto www.sarc.com and do a search on wuauclt.exe you should see at lease 2 results See also: Link |
| Chrono Inc Administrator | For a long time me computer and my internet connection have been giving me problems. Every time this happens, wuauclt is running. Several opinions on the web say it is POSSIBLE if it is malware, especially if you find more than one copy of it. Be careful.... |
| Diego | Its completely neutral, you can check out in http://www.hattrick.org/Common/default.asp Here you can try a free sacn online to check out if its benign or not. I had one in my windows xp,and with many programs ive checked up its neutral |
| Maciek | chuj wie co to jest. skurwysynstwo sie wjebalo bodajze po instalacji sp2 ale jak to syf microsoftu trzeba traktowac z rozwaga. chetnie bym to wypierdolil bo to jednak ram ale.. bil pewnie mnie pokara. |
| shulkman | This is know as Windows Update Auto Update Client. It should only show on task manager if you have auto update turned on. If it shows up when auto update is off, then you should be concerned. |
| kenboyles72 | This Windows Automatic Updater. You can disable if you dont want anymore processes running. It is not only included in system32, but also in prefetch and service pack files. Dont be alarmed. |
| S!Ri | My System is safe, and wuauclt.exe is downloading the SP2. 115480 Bytes, Version: 5.4.3790.2182 |
| Dean | It will not harm your system to stop this process. However, if you go to the Windows Update web site, this process needs to be running for Windows Update to work. |
| Tarek El Far | this process when it runs in my windowsXP (SP2) PC , I cannot browse the internet, if I kill this process, immediatly I am able to browse the internet |
| db | Checked in windows task manager I have two running. one is a system 8940k the other user 7788k mem usage. Seems to big not to be malicious |
| Nik | wuauclt seems to be a windows file, wuauLTC looks like a virus. Even Symantec seem to use the Windows file name not the virus file name |
| Sofia | Yes it's a windows file, but with the amount of virus's going aound you should really disable it until you need. |
| jaye. | a couple of them popped up as windows was running automatic updates so i guess it has something to do with that! |
| DiddleDeeDude | Eats up about 6 to 7 mb in tskmngr ... that's a lot to be sending out there then, innit? |
| Rhonin | Process listed as task when I have autoupdate turned on. If turned off, it goes away. |
| Jill | It is needed for Windows Automatic Updates! It is not adware, people! |
| Rich | just a windows automatin update file. nothing to be worried about |
| chicky | after remove with HijackThis start this file after reboot again. |
| bong | wuauclt.exe 111 kb / wuauclt1.exe 165 kb inmy win xp directory |
| William. A+ N+ MCSE MCSA | This is a file required by Windows Security Control Center |
| nick | windws updater |
| Naruto | It's a Windows update process, but as with any process, you should check to make sure it's not a trojan in disguise. |
| mindping on aim | could be very dangerous, if you have auto update turned off, and not at windows update, and you see it running, spell trojen, if you end task on it and it starts agian, spell torjen |
| kedare | it makes iexplorer cpu usage 100% |
| | windows update, not dangerous at all |
| Jim | a windows update file; keeps causing my computer to lockup. will not upload updates any more. Deleted file out of frustration. |
| justin | I know that it is just the update manager, but it does screw things up. If you game alot, it might not let your TS and Game run at the same time. This happened to me, and a couple of friends. |
| idiot | contracted nasty virii after attempting to crack visual route 8.0 warning - VS8.0 crack = virus. this, and spoolsv.exe insist on running in task - i have cleaned all virii but these two files now insist on running. they arent virii, but their invoction is strange where they neve rran before this issue. |
| rudolf12c | on XP : wuauclt.exe size 112Ko AND wuauclt.1exe 166 Ko both in system32 folder and 2 other in svcpckfile i386 (110 & 165 Ko) |
| tuxlover | raise ... ?? ... at every registry modification, write edb.chk which is send back to microsoft during updates |
| Willow | It can consume all your cpu if it has problems, See also: Link |
| McBobbins | This program has constantly been running at 50% processor time. I really don't trust this file !! See also: Link |
| Goran | You all are talking that this is windows automatic updates .We know that ,we are not stupid but it can also be trojan or spyware ,like explorer.exe can be .I have allso 2 of these files on my computer ,the first is wuauclt.exe and the secound is wuauclt1.exe like bong say .So does all of you have these 2 files in windows folder or only few of us ? |
| microsoft | this is not supposed to be in Windows XP at all, it is the WinME Windows update. I have a perfectly fine WinXP SP2 machine here, and Automatic Update is ON, and this process is NOT running on it. WUAUCLT.EXE is _bad_ if you find it in WinXP. |
| BobC. | It was running in my windows task mgr, but after I disabled Microsoft autoupdate, the program was no longer in the task mgr. |
| noob | Just check if you have Autoupdate turned on. Turn it off - if the process disappears it's certainly not malware. |
| aSiD | It runs on machines with SP1 and without other online updates too! Where is the start order? I dont like it and delete it now, it is the only suspect task on my very suspect system! |
| -deg | OK, not a virus. But it stops cold all of my internet processes, including browser, VPN, and email. It also trips my Sygate Personal Firewall, no matter how it is configured |
| | This is NOT Windows, on all versions after 9X, It'll mess up your Graphically intensive programs, mostly the ones that require video card access. |
| | i don't know what it is but it dissapeared from task manager a few minutes after startup |
| Eleven Even | I have wuauclt.exe at 111 KB and wuauclt1.exe at 163 KB in WINDOWS/system32 (this is XP Pro). They both show as modified in August '04. WUAUCLT.EXE399A8E72.pf is in Prefetch (23KB, modified today), and another wuauclt.exe in ServicePackFiles\i386 (137KB, modified in August '02). The lower-case version shows up twice on Task Manager, one using 576K and shown as used by me, the other 1140, used by SYSTEM, and using 1% CPU every few seconds. |
| Megaflops Argentina | I have 2 filez: wuauclt1.exe 167kb and wuauclt.exe 113kb. Is this a problem or is it needed by Bin Gays? |
| OzBrickie | It is definately for windows update and comes with SP2 but why does it run when you have auto updates disabled? Its annoying when my server dials out when I dont want it to just because this file runs. And yes, it only runs for a few minutes. Had SP2 running for a month or so but this is the first time I have noticed this strange behaviour. Any Ideas? |
| Sanim Samnani | It sure is a windows update file, but how do i disable it from running everytime i boot |
| | windows update process |
| Willard - MCP/MCSE/SECURITY+ | It is windows auto update file. Could possibly be malicious but you have to use best judgement to decide. If the file is not the original name wuauclt.exe then more than liklely safe. If it is renamed something else (even 1 letter) is likely that it is a virus placed and being disguised as wuauclt.exe. |
| Muthu Kumar | Its a Windows Update |
| Fikky | I ussually Have the service running whenever I have automatic Upfate turned on |
| Pascal | Das ist die Datei die die Automatischen Updates von Windows verwaltet. |
| | I have this process twice - one is 6716 k the other 40 k - the6716 goes away if i turn off autoupdate, the 40 k not. any knowledge ? |
| Lukos | Wuauclt.exe is a process managing automatic updates for Windows. This process continuously checks for the latest updates by going online. This process should not be removed if you want to get informed about new updates. |
| Crystallina | All I know is that whenever it's running, Internet Explorer fails to work, and when I kill the process, it starts to work. There are often multiple copies running at a time. |
| Michael | More than one at a time will be on my system. When I end process or tree, it pops back up. I don't have internet for some reason now. And for some reason my System Idle Process is running at 97% all the time. I DID try to update windows, and now I don't have internet access. What gives??? |
| | the automat. update process |
| Kyle Garber MCSE/MCSA/MCME++/R54/55 | Very dangerouss!! Must destroy immediatelly!!! |
| Mario Peñaherrera - Ecuador | En mi maquina, cada vez que se autoejecutaba colgaba el servicio, la maquina se inhibe. Ademas, cada vez que lo eliminas con Shift+Del el muy hijo de puta se regenera y es autocreado nuevamente por otro archivo. Hasta que encontremos la manera de eliminarlo... creen un usuario en su maquina, con contraseña... encuentren el archivo en la carpeta System32 y denle click derecho y seleccionen EJECUTAR COMO y quiten la opcion de usuario actual, seleccionen que solo se ejecute con el nuevo usuario creado, ingresen la clave del "usuario nuevo" y solo se ejecutara cuando inicien sesion con ese user. |
| Lili | It is preventing me from getting on the internet and making my system run slow when I do get on. |
| john | When i go into the windows task manager, the wuauclt.exe comes up not under a system username, but my log in name. Could this be a virus, worm, etc.? |
| Angel Colon | It's not dangerous but it can affect your pc performance. Just disable it! |
| kevin | If it is not documented, it should not be running. |
| Brian | Does seem to be a legitimate update process., I just installed a Logitech Wireless Mouse, and now it pops up when I start. I think windows is searching for a better driver. In the end, it may be relatively unnecessary, but it's quite far from spyware |
| common sense knows nothing | For all you people who think this process could be safe. A virus can name itself to wuaucilt.exe and appear to be the windows updater when infact you are getting screwed. |
| Evilwindows | Why is this file running when i've turned off automatic updates |
| | I turned automatic update off, and it still keeps running. And using my internet connection in the background! (this stops when I stop the service). In the registry the name is wuauRclt for some reason. Took me some time to find the file because of that. Only found in the winnt folder and service pack files folder. |
| Ricky | From c:\windows\system32\ in Windows XP after Sp2 install. wuauclt.exe is a windows updater called from svchost.exe, while not a virus or spyware quite badly behaved, send info from your pc without asking and can(will) slow your computer down. MS Bloatware |
| sM0Ke | Startet zusammen mit ieexplore.exe wenn man die windows hp betritt als updater See also: Link |
| GodofPain | I have it in system32 wuauclt.exe 113,944 and wuauclt1.exe 167,704. I think is neutral if is the trojan which appear into other dir. See also: Link |
| Linda | IT was in my prefetch, windows folders in addition to system32 See also: Link |
| ByteMe | If detected by AV prog it's created by Backdoor.Clt (Trojan) See also: Link |
| Lord Doskias | i think it would also have to depend on whether it says it is started by SYSTEM or "username", if it is started by SYSTEM, then it is the autoupdate. with win xp and microsoft's "new" autoupdate, if your system detects a windows update, this will start with the system |
| Andykirky | Is the automated part of windows update, not needed if you do updates manually, if it is running (one instance only) but autoupdate isnt working could be a virus of same name.i uninstall it and manually update. |
| joseph | seems to also run aupdate and lucom2~.exe claims to be from norton starts after surfing for 40 mins repeatedly caused a write crash im gona delete it its definely not a updater since it was already updated and it hides quicky as if its stealing private info and sending it |
| Grim | Running XP. Is still appearing after switching off Automatic Updates. Would people who are saying it's just the Updater get a clue? It's also a malicious trojan which is continually running in the background. I can not get rid of it! |
| Ron | It is installed along with XP SP2. Just don't know why it runs for a while on TaskMgr (after system is started/restarted) even if I have automatic updates turned off... |
| | It is an annoyance. I've deleted the autoupdates from windows, but it keeps trying to restart my computer. This continues even after I manually closed the program in the task manager. Moreover, the updates never worked and it slows my computer down to a crawl and makes my programs non-functional. |
| | i deleted it and it just reproduces itself |
| Ricki | task is closed down, then autoreopens |
| alex | It keeps sending emails to all my contacts |
| mandai | It makes my computer run slowly in general and when i try the start internet explorer it comes up with errors |
| Udaya Gammanpila | Virus under this name is makes the systme very slow and leasing virus scanners cannot detect or remove the virus. |
| TwiggyZ | This is not Malware, just a windows update program running in the background. If you don't want it, then just disable automatic updates. |
| mark | The process only runs when you have Automatic Updates enabled at a certain time each month. It is not on all the time, the size of the file VARIES depending on if it is downloaded content, it does not download nonstop but in bits and peices to avoid disrupting net connections. Once again, size will change. It goes away after update is completed after a timeout period based on many factors. |
| Mr. Fix | I have WinME and the one-and-only copy of wuauclt.exe on my system is in the C:\Windows directory , not C:\Windows\system32, which so many have insisted is the only place it should be found. |
| Jemi | Certainly use for Windows Update. But "Backdoor.Clt" can copy itself as "wuauclt.exe" |
| JT | Chances are if you searched for it and it didn't show up, its probably because you don't have windows search set to include hidden and system files. |
| Dogon | Whether it's legit or not, it really messes up my MMORPG playing. Up pops the hourglass when I should be popping monsters. Deleting it seems a bit extreme but it just seems to runs as it pleases otherwise. |
| Nirav | It is a windows update process..... i had turned off auto-updates.... and had never seen this process in taskman.... but as soon as i started auto-updates, this process appeared in taskman.... but for me, turning off auto-updates did the trick... now it does not show up in taskman... |
| ClydeV | from Windows Task Manager / Processes |
| MakeMineMacAgain! | My comp has slowed to a crawl after SP2 update, on a newly installed OS XPPro. This file is running. If disabled, the computer runs perfectly. If enabled and running, dawg slow. This must be a microsoft SP2 problem. |
| BadThad | Windows process that runs as a service. To disable it, just turn off windows updates from control panel. Then, go to services and disable it. |
| THE TECH | "Basic Windows" program |
| Token | Beware, on winXP it is quite often a virus. Will block traffic from Edonkey2000,computer will hang. Stop the process right after the system starts and you will be fine. Almost impossible to remove.Can be a part of a WIN XP SP2, in that case - MS to blame. Most certainly monitor your system |
| | this is a windows file... if it bothers you and you want to disable it just go to control panel, open automatic updates and select turn off automatic updates... that's it |
| Prophet of Philosophy | It's Dangerous and it's Not. |
| Gary C | More than 1 copies as mentioned by other users. The org file should be for Windows update but when it has more than 1 ... furthermore, PC keeps receiving data even doing nothing online. Disable Auto-update and wuauclt won't help. Found out a service called "BITS" (Background Intelligent Transfer Service, auto run when start up) which is the one busy downloading. There must be something wrong. Does it have anything to do with that few copies of wuauclt.exe? That I am still working on. No Anti-Virus program pick up anything wrong with these exe files. Also checking WService.exe |
| computers suck ass | the only thing this wuauclt.exe file has ever done is caused me to get diconnected from the internet. when it shows up in task manager all you have to do is end process but this is just a temporary fix. |
| Corkman | security center auto- updater(SP-2) windows will still auto-update without this process running |
| chuchuluco | I know about the windows update client, but I had to reformat two PCs that were completely registry-modified and locked up just after I saw a persisten wuauclt.exe proccess. |
| wire-geier | I don´t need it so I deleted it - comp still runs fine |
| +Area51+ | i had update turn off in winxp and i still got the fil in tskmgr but only for a short wail when i start up |
| Dean | Ignore the authors whose systems are virus infected and blame it on this process. This process is NOT a virus or a trojan or spyware. It does consume some system resources, so you can disable it in Windows Services and re-enable manually if you want to run windows update. |
| Tux | Seems to screw up any graphically intensive games. Get rid of it! |
| aem | Client für automatische Windows Updates |
| kairalikeralam@yahoo.co.in | win xp system keeps restarting it never come up , waisting my lots of time |
| Ray | This ran for hours on my 1.8 Ghz Gateway. CPU usage for the task was pegged at 94% and any other task crawled. Task Manager showed about 4 instances of this -- all except one at 0% CPU. Thinking it was doing some vital update I left it running overnight, but when it was still running in the morning I decided to kill it. No way would it let me stop it or lower its dispatching priority. I pulled the plug. The only copy on my system is in WINNT/System32. One more giant leap forward for Microsoft |
| Robo | It's a virus or trojan for sure. I never had this icon so much in my taskbar, only when there where new updates. Since a couple of days, The icon is always visible, wuauclt.exe is always running, and when I kill it, it starts again in a couple of minutes. But then I found out that there was another wuauclt.exe-file in the system32-directory, called wuauclt1.exe. This file is 165 Kb, and wuauclt.exe is 112 Kb. When I delete wuauclt.exe, the file appears within a minute. Now I have killed the process, deleted wuauclt.exe and renamed wuauclt1.exe to wuauclt.exe. It seems to be solved now! |
| Dutch trooper | try to close it with the taskmanager when it's autoreopen itself then you got a problem get rid of it and place a good one. See also: Link |
| Gabriel Fernandez | I have the same problem. This file is part of the windows updater, however, when you turn off the automatic update, it keeps running. It uses svchost to connect to the internet, so, it seems that svchost.exe is sending information, but it's wuauclt.exe who's sending it. Use a program to check the connection, wuauclt sends information to the windowsupdate site (207.46.20X.X). It's definitively part of the windows updater, but it sends information without your permission. I use a firewall to block it. |
| Xabora | The file is both, Dangerous and Safe. There are trojins that rename it and make use of it... and then its also very safe when its not infected. (I had the program that was altering to this at will as I was flipping the names around... about 1 second to do it before its renamed and taken over again) So be cautious about this file in general if you see more than one running. |
| SABAHAHAHA | this is an authentic windows update file that acts crazy. to disable it properly, it has to be done through the 'services' window via the run command (just type: services.msc) See also: Link |
| Johan | It's just the windows automatic update downloader, but the problem is that when it is updating, you just can't shut it down before it is finished. That is a problem, because it is at this moment trying to download an update that is unavailable... |
| Jeff | This is a normal Windows XP component, used for Automatic Updates. |
| | the size of"wuauclt.exe" is 112kb and is located in c:\windows\system32\ in Windows XP and is signed by verisign |
| Wasim | I just found this file and also file related this with exention pf,my sys is not working well ,whats this |
| Rizwan Shah | wuauclt.exe - Here is the scoop on Cult Trojan. The big question: what is wuauclt.exe and is it spyware, a trojan and if so, how do I get rid of Cult Trojan? wuauclt.exe (Cult Trojan) - Details Many viruses will appear in the task list with the process name 'wuauclt.exe'. One such example is the CultB trojan. You should treat this process with caution as it may be a virus. |
| Jim | Any time my computer was freezing up/crashing, Task Manager shows wuauclt.exe as the programme that's "Not Responding". After closing it it generally starts up again automatically by itself. Have disabled automatic updates, and so far computer has been running fine, with no evidence of wuauclt.exe running! |
| Steve | I have the same problems as it coming up even after I've stopped it under system services and under the control panel. Also it's stealing bandwith and i'm sure it's a trojan but i do no know how to remove it...It recreates itself after I delete file and no virus scanners pick it up (AVG, Symantec Pro) |
| Perturbed | Part of Windows new updater for SP2. Runs behind your back even when auto update is turned off. My firewall (Blackice )shows it running when I use application control. This means it is communicating over the net. I don't and wouldn't trust it. There is no need for it. Thanks MS! |
| io | Huge PITA. I don't know what it is, but it always starts up on first boot and keeps running for several minutes... then turns itself off. While it's running, my normally extreemly speedy PC is a complete mess. I do not now, and have never had auto-updates turned on. |
| | Part of Windows new updater for SP2. Runs behind your back evan when autoupdate is turned off. My firewall (Blackice )shows it running when I use application control. This means it is comunicating over the net. I don't and wouldn't trust it. There is no need for it. |
| | The last 2 days my CPU has been spiking 50-100%. I watched taskman for a while and I have 2 wuauclt.exe running. One of them stays consistant and doesn't use much cpu, the other shows up every 15 secs (yes I counted for about 3 mins). |
| tomte | Wenn es eine zweite Datei c:\winnt\ServicePackFiles\i386\wuauclt.exe gibt, stimmt dann noch Ihr Satz: "Wenn das nicht der Fall ist, handelt es sich bei wuauclt.exe um einen Virus, Spyware, Trojaner oder Worm!"? |
| Sean | this file wasn't even on my comp till i got a virus ever since then it's been running in the task manager i keep turning it off and it keeps coming in by itself so i don't think it's very good at all. |
| craigL | the prefetch file means nothing, Athanon, but i have a wuauclt.exe in my system32, and in one of my service pack folders. what one should i get rid of/should i do nothing? |
| John | This file blocks software use, and or functionality,it hogs memory as it keeps opening several instances of itself and slows down system |
| elvispelvis | i dont like this file, i have windows automatic updates disabled and yet it still runs in the process window. WHY Microsoft? |
| Robi | was muss ich machen wenn mir die fehlermeldung wuauclt.exe kommt. ist im ordner c:windows/system 32 vorhanden. |
| MyWorld | When this file is running on my system, I can`t get in any ftp. Don`t know why, so I thnik it is a trojan |
| Callifubar | I have autoupdate turned off - Why is it trying to run? Because it leaves the service in Automatic. |
| John | Microsoft "wuauclt.exe" virus made by microsoft to control software distribution and updates. |
| Tonio | windows update system file |
| aalok kumar sharma | what is the use See also: Link |
| Whoot | its an annoyance now. It nags me to reboot every couple minutes to make updates 'effective'. I hard kill the process and it automatically restarts. I kill process and delete the file and the dllcache file and I get 1 nag screen saying I need to replenish the file from the Windows 2000 CD. A day later the file magically appears again out of nowhere and runs its self to nag again. God damn microsoft crap. |
| Ben | It keeps coming on even after I end the process. Takes all cpu up. Computer runs too slow and it comes on everytime on boot. I have to hit the end process for 10 minutes before it will stop .... somehow I cant delete the program. |
| Mariusz | To spowalnia system dosyć mocno jeżeli ma się Wina XP i tylko 128 ramu. Lepiej wyłączyć to i aktualizacje instalować z własnej ieprzymuszonej woli, a nie wtedy gdy Bill cie informuje |
| ShodaN | This file is part of Windows Automatic Updates under XP. However, certain virii mask themselves as this file, so be warned, that if it's not found in \%WINROOT%\System32, it's a virus and should be deleted. |
| Sotek | Has been very malicious for me. Restarts computer by using an LSASS exploit, gradually breaks system, denies internet access. Files: wuauclt.exe and wuauclt1.exe. Startup means unknown. |
| Rose | Automatic update is off... it still runs for a while when I log on. Few minutes it disables itself. Tried ending process through Task Manager - No problem! |
| tigerclaw | this wuauclt is a background virus it alous its crator[master] to control you pc[reset,delite files,actualy it can do enithing] See also: Link |
| Matt | It can be bad and good, but is usually good. Click link: See also: Link |
| Ad | Continually running despite numerous attempts to stop it. |
| nick | (W)indows(Update)(A)uto(U)pdate (C)(l)ie(n)(t) See also: Link |
| Matt | Can be bad or good. Read more: See also: Link |
| Oli | All those who have a switch offable 100k version need make no comment. The one we are all talking about is a 6-7meg non stopable pain in the ass. Its hard to remove check link See also: Link |
| ComputerStriker | This file keeps running even if i disable windows update... and slows my internet connection. When I end it it comes back how come? |
| Omnivorous | wuauclt.exe gets installed by websites and typically loads the application to memory and puts a pre-fetch file (.pf) on your system as well. After seeing it run (or crash IE), suggest a system scan to eliminate the .pf as well. |
| chris | i do not know what it is, but i tried ending it and it would just restart. so i ran a search found two folders with it. System 32 and I386 or something. I deleted I386 and turned off auto updates. It is no longer a problem. |
| Ivaylo Petrov | It's not a virus in most cases, but a pesky proccess runing in every 15-20 sec. for about 2-3 sec. and slowing Win. It kept freezing my OS often. After disabling Auto Updates from services.msc everything looks just fine See also: Link |
| Jt E | ITS VERY SIMPLE. This is the Automatic Update Controller. Its not just a Windows Millenium Edition File. As a matter of fact, you can find it on Windows 2000 as well. If your A/V or Spyware is picking it up as a threat, then have it cleaned!!! If you have Automatic Updates turned OFF and its running, Have it cleaned!!! If your A/V or Spyware checker is NOT picking it up, and you have Automatic Updates on, then yer prolly fine. As far as it screwing with your games, Windows just has a tendency to do that. Contact the game manufacterer and see what they say about it! |
| Randy | Wuauclt.exe has to do with windows updates. Man do a little research before posting sad..... WUAUCLT.exe /detectnow is used to find a wsus server. It works with the Automatic update. WUAUCLT is you automatic update service |
| BUFFY | My Norton Antivirus picked up wuauclt.exe as having a virus. When I ended it in Task Manager, it popped up again I think this trojan invades this file and has to be deleted manually after disabling the Windows update program. Always use Sys Restore just in case a problem, but it came up in red as a virus on my computer. I will work on this and get back to yall |
| ToneDef | It is a legit Windows Auto Update Client. If ya wanna switch it off, or prevent it from rebooting your computer (after you have installed some Windows updates), go to Settings -- Control Panel -- Automatic Updates. Here, you must turn off automatic updates. You will then see wuauclt.exe disappearing from the list of running processes (if you are running Task Manager), and the icon will disappear from your sytem tray. |
| SpiN | WinXP Pro SP2 - This is an autoupdate client. The checksum on my OS is ebf1ab7e4fc05cabf2f4680d2a45f827 -- not sure of this remains constant from system to sytem. Can others verify checksums? (MD5) |
| Xander | Its the update process for WinXP. When automatic updates need to be installed, two of them appear (one the actual process, the other, the update checker). Ending both will result in both coming back. If you dont wanna restart, change your settings to be 'never download updates' and then end the process and it will go away. |
| bocher | I don't know anything about it but I found 5 of them in these locations: C:\Windows\Prefetch C:\Windows\ServicePack C:/System32 C:\Windows32\config\systemprofile\TemporaryInternetFiles\Content.IES\CHM78XIZ\Wuault[2].cab and there are 2 of these in the same area. |
| http://www.mathematikos.uboot.com | bremst mein XPhome gewaltig ein..vielleicht deshalb, weil ich autoUpdate aktiviert hatte und SP1 läuft? jetzt hab ich diese updateOption rausgenommen und XP flutscht wieder |
| some guy | When i close the file in task manager it comes back up as a system process. Whne i close that, it opens back up as a user account process. it repeats forever... thats probably not good. Plus, my internet explorer process gets boosted up to 100% since its been on my computer |
| Matt | Soy un pringao |
| luiz Carlos Bordin | corrigir problema |
| olrayt | i used to have two of these in my dual boot win98/win2k pc. when i turned autoupdate off it stopped bugging me. but of course that's just me. |
| Kevin | It wasnt causing me any problems, but I stopped the Automatic Updates service (also changed it's startup option to manual) and wuauclt.exe disappeared from task manager list. I have Automatic Updates turned off. |
| colin | it takes up 98% of my cpu,crippling,seems to disable norton,disableing auto updates has no effect, help! |
| Scratchy | Just search the File and leave the rest to your Scan :-) |
| vaptor | if you use process explorer on xp and and suspend it in my case it multiplied i think its a trojan cause its trying to dial out and notices when you suspend it unlike normal programs that only can restart if not running already |
| Wibisono Sastrodiwiryo | This file normally if legal windows file but somehow has hijack by Trojan. My PC is infected by this file and symptom is it will restart my system when I attemp to open registry, msconfig and even when I try to see the path on the shortcut the system will produce error. This file is keep stay on startup menu.This file is very dangerous, please everyone be carefull when you find .exe file which has a foldered icon, I got infected when I double click on this damn file that I thought it was a folder. |
| matt | its good |
| Jerry | ive had this problem since 1 month ago, whenever i play d2x or warcraft3 for a few minutes, the computer gets a complete hang. have tried all good antivirus/antispy, none worked. according to "This is NOT Windows, on all versions after 9X, It'll mess up your Graphically intensive programs, mostly the ones that require video card access." is that possible this is why? i use winxp-sp2 and i have wuauclt.exe and wuauclt1.exe in my windows/system32/ folder. |
| Guang-Ho | So does anybody knows how to kill this program? This program uses most of my memmory and fan of my laptop is running crazy!! We need cure. For my case, I even couldn't find the files... but only in task manager. Help really needed |
| Chris | This file shows up say 6 0r 7 times in my task manager. Look for sysmgr64.exe in the start up services. After I disabled it my computer stop shuting down all processes....it only try's to slow down when I try and update an app. I can surf fine but updates wont happen..... Help |
| | (W)indows(Update)(A)uto(U)pdate (C)(l)ien(t) |
| Todd | i have this file running all the time and after about 2 or 3 minutes my machine will freeze up and restart, the only way i can get on my computer is to boot it in safe mode, i need help getting this thing off my computer anyone know how? |
| Kisara | Windows Update, usually. But can also be W32.Cult Trojan. Treat with care. |
| Burton | The official issue of the ‘wuauclt.exe’ file is issued by Microsoft Corporation and runs the Windows Update AutoUpdate Client program. Specifically this will interface with the Microsoft Update website to identify the current status of your PCs Windows OS and peripherals as well as maintaining a history log. As there are a pile of large patches available from Microsoft (depending on your specific OS and peripherals), the AutoUpdate program often does tend to monopolize the Internet connection and processor. This computer is running WXP Pro and has had 88 updates since December 14th. Get smart |
| Dave | Its an automatic update process. If you don't want it running you can go to services and put automatic updates to manual. But when you need updates, it will ask you to turn it back on. User preference I guess. |
| dag | it doesnt effect your computer other than update it, if system update is on then u cant close it other than turning off system updates |
| Nordman | My friend has problem with wuauclt.exe. After booting his computer, error message shows 5 times "wuauclt.exe made an error blah blah all data lost sorry..." Windows Update doesnt work, if you go Microsoft's page and try to update those error messages are back. Disabling Automatic Updates from Services seem to work and get rid of those errors but in long run not to update Windows aint so good. What can be done, repair install? Hope not. |
| | I disabled the automatic updates. but this file stayed open all the time. It slowed my computer, downloaded viruses, AND disabled my sound device. No spyware/virus programs would detect this file, so I removed it manually. My computer works normal again. |
| 0ptim0 | My Windows Auto-matic Updates is OFF but wuauclt.exe would sometimes be running. After carefull monitoring, this process starts whenever I access my nVidia Display Options panel(s) through 'Display Properties''Advanced'. What led me to do all this research and ultimatly to this website was my self-reboot problems I was experiencing while connecting to servers through on-line computer games i.e. Counter-Strike. These self-reboot problems only happened when wuauclt.exe was running in the background and since I access my nVidia display options frequently while playing different games, go figure |
| JimmiNS | Like other people says! THIS IS A WINDOWS FILE. If you delete it from your system you will no longer recieve updates fro microsoft.com. SO DONT DELETE IT! |
| ze | I had a problem with this, too. In XP's system32 folder it created a subfolder called 'LastGood' with another wuauclt.exe and some other files. It appeared in processes (with AutoUpdate off). Whenever I tried to connect to the internet, it turned off my computer in the minute any activity was started in browser or download manager, etc. Antivirus didn't find it (though it was freeware). Ending up this process didn't solve the problem. |
| vanaraja | in internet the system wil be hang |
| Frank | I have two running in system 32. Wuauclt.exe and wuauclt1.exe These two exe files redirect sites |
| Don | I changed its name and it respawns within 2 to 3 seconds. Both wuauclt and wuauclt1. Both are applications. |
| LeRoy Pea | This file checks my hard disk every other second. It slows down my system. I have auto updates "off." PC Defense doesn't detect anything wrong with it. I'm stopping this manually thru System Manager. My laptop now runs faster. |
| | It's not suppose to be in Windows XP, I did exactly what Robo (another user from this thread) did. It will appear again after you delete it. Suggestion: delete it and rename it right away to -- wuauclt.exe Then it won't appear again (terminated). The size of the file that is supposed to be deleted is 122 kb.. Good Luck! |
| Bergundal | It's not suppose to be in Windows XP, I did exactly what Robo (another user from this thread) did. It will appear again after you delete it. Suggestion: delete it and rename it right away to -- wuauclt.exe Then it won't appear again (terminated). The size of the file that is supposed to be deleted is 122 kb.. Good Luck! |
| Maur | For people with a slow internet connection , on the Windows Update page in Internet Explorer, click the "Personalize Windows Update" link under "Other Options," turn on the 'Display the link to the Windows Update Catalog under See Also" option, and then click Save Settings. Then click "Windows Update Catalog" to view the listing of downloadable updates and any applicable instructions . |
| Ronbo | I have Black Ice. This file first poped up after my room mate decided to install Bear Share. I removed bare share and blocked the file from fireing. I recently reinstalled my OS, but this file keeps popping up...Looking at my application list, I have three counts of wuaucly.exe in c:\windows\system32 c:\windows\system32\dllcache and c:\softwaredistribution\download\bunchoflettersandnumbers. I also have wuauclt1.exe in the same locations. I'm getting a hit for wuauclt every sixteen seconds. Auto update is turned off and the file is blocked by my firewall. My cpu is at a constant 100% |
| icie | Microsoft Windows update. Useful to terminate this process if you don't care about windows updates, want the yellow shield off your taskbar, and especially when windows threatens to restart itself every 5 minutes. Terminate it and work in peace until you want to restart. |
| Leo | This file have made my computer network in an abnormal status. |
| Rachit Bhatia | I found this file in two locations: C:\WINNT\system32 and in C:\WINNT\ServicePackFiles\i386 folder. I just disabled it from the task bar and then it disappeared from my Windows Task Manager. Can't say much about it. |
| manylander | When running on the background makes the connection sloppier. Also sometimes it exhausts the harddisk. I hear it turn and churn while the led blinks forever. I don't like it, removed it. Will update manual. Have a thing about "auto" programs, especially if from microsoft... |
| joered - roma | On laptop pc with slow hd, after a long standby the process will take too much time to check for new update and it slows down the pc due for an high IO traffic on the hd. |
| Kuun | It can be a virus. It was impossible to kill using task management. Impossible to delete. I killed it using zone alarm, then I copied the wuaaclt.exe and wuauclt1.exe from a non-infected computer and replaced them. The virus was gone. |
| Chip | This file has ALWAYS been on my computers and never once caused any problems. my computers run just fine |
| Fp1 | I have winxpcorp with sp2, updates off and panda with firewall. in my machine it appeared out of nowhere after a fresh boot and after i dialed my isp's number and connected to the internet. I opened a site and all my browser windows gave me a crital error and shut down, both ie6 and firefox at the same site cadamars.com. Then I rebooted closed the process, because it appeared again, reconnected and now its fine. It could be windows's legit checker or it could be a trojan, im gonna run a test and delete the file if i find it. |
| Silentbob | Like many others have said it is the auto updater for MS. Turning off auto update via control panel does not stop it from running. To keep it from running do the following run- services.msc- Automatic Updates- Startup Type- Disable. That's it. I stopped it from running on a Car PC and have never noticed any problems with it on my Desktop so there really shouldn't be a need to disable it in services like I did. |
| brent | If i disable it, there is no sound. This is with windows XP professional SP2 |
| shawn131 | I had this dam thing in processes 15 at a time frum 0 to 14k must be a trojan fd me up did restor froze and lost partition dam! |
| hobbs | slows down pc, causes internet(dialup) to drop out |
| Shunmu | PC is shutdown |
| Mogi | that's an update application for windows, but you can safely remove that process from your tasklist manager. |
| Cyanide45 | advice if everything scares you stop downloading, using the net, burning cd's cracking software Because those of you who dont know the worst thing in windows is the one you cannot stop, the system event log, its contents are regularly sent from your pc, also the system file indexing service , well that one will get you in trouble, dont turn these off btw, your systems will crash, i think it's a way to stop piracy etc, and a way for microsoft to do some damage control with regards to lawsuits etc |
| the man | this file is just poping up in my firewall granting itself permission after the dl is done i just block it only found a prefetch one deleted it and the one in system 32 folder seems ok not found in running process or in msconfig anywhere prob safe i just blocked it hehe who cares about it See also: Link |
| Matt | Delete any program labeled wuauclt if it is not located in system32 or service pack files. I had a file with the same name in the I386 folder, and it kept me from surfing the internet. After deleting it, everything is running smoothly, including the automatic update process. |
| rikimaru silent assasin | windows update process. can be disabled. |
| jesse | Usually Windows Update file, but sometimes W32. Cult Trojan. Be careful. Whoever made the Trojan is very smart to make everyone blame MS. |
| Chandravel | This will affect system Performance |
| scott kendall | it's a windows auto update file, it should be in 2 locations only, system32 and prefetch, anywhere else and it could be a virus |
| miarf | if you want to stop it from starting up, run services.msc and set it from automatic to manual/disabled |
| AJ | Used for windows auto update. Filename is an abbreviation of "Windows Automatic Update Client" |
| Rapha. | I have pop add problems, after every Internet Explorer window open I will have a pop ad. I end the process thru windows task mgr. and all my pop adds are gone. |
| Ryan Preston | It is, like many here have said an Automatic Update file. If found in the sys32 folder, it is legit. When you view the Task Manager, it should say "SYSTEM" for user name. If it does, leave it. Even with AutoUpdates disabled, it will update now and then for files, but the AutoUpdates just reduce the updates by a lot. Nothing to worry about unless elsewhere but "SYSTEM" and "C:\Windows\system32". Hope that helps! |
| Dom | Not dangerous, Windows update program. |
| Kab | Its an automated update for Windows. It can also be present in C:\WINDOWS\Prefetch and in C:\WINDOWS\System32\dllcache as well as the above mentioned directories. The main process wuauclt.exe will be in the region of 108-114Kb (can differ). Do NOT clear it unless its present in the aforementioned directory positions and found elsewehere on the system too. |
| Paolo | This *IS* part of the M$ update stuff. If you want to kill it, just right click and choose kill process tree. Problem Solved. What an obnoxious piece of software! |
| Piyush | The original and mal-free wuauclt.exe that can be found under windows\system32 is an auto update file. There could be either 2 files wuauclt1 and wuauclt or jus wuauclt. If you installed the latest microsoft update digital certificates, then you will have the old wuauclt (installed with windows and part of windows update) named as 1 and new one as wuauclt. If you find this file in other places on your computer like c:\windows it could be malicious. I have come across at least 1 trojan myself and heard about others which disguise themselves with this name. The one that i came across was |
| Anon | If you installed updates but don't want to restart your machine and can't get that nag window to stop bothering you, terminate this process. |
| Debra A. Snipes | It starts when you go to the TRUE Windows Update page. If this process is not running you are at the FALSE Windows Update page used for phishing |
| penismuncher | (W)indows(Update)(A)uto(U)pdate (C)(l)ien(t) |
| Mr. Truth | Windows update services |
| | On laptop with sp2 and 512k (max) it will slow the system down, consume ~100% of the cpu tasks. for those who are comfortable making changes to your sys |
| neus | This is only the windows updater. What a stupid comment "Virus and spyware" |
| Takman. | If this is part of the auto updates, then why does it still run when you have automatic updates disabled? |
| MikeF | It is harmless...,only used for microsoft automatic updates |
| Mr. Anonymous Dude | To those saying their copy will keep launching when killed off, that's because the automatic update client runs as a service, and when killed, Windows will restart it. You'll find stopping the service "Automatic Updates" in the services applet (services.msc) will keep wuauclt stopped. As for wuauclt1, I've got several clean machines that have it, from various installation sources, and it seems legit, despite having a slightly different filesize, they are both signed with a similar signature, the only difference being wuauclt1.exe having it's signature date a minute later. |
| baudrunner | As with any process you see running in Task Manager which just seems to be causing your hard drive to churn away for awhile don't panic. Just google 'wuauclt process', as with any process about which you have doubts, and you will eventually learn to click on a secure link return which will give you the information you need. |
| Kent Brockman | Microsoft is trying to render XP unstable in an effort to boost Vista, this is now a danger. Stop it from doing harm by opening regedit. Go to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ add a key "wuauclt.exe" add a string value under that "debugger" and set the string value to "ntsd.exe" this will start the program in a debugger and not let it do any harm |
| Laz | Appears associated with an instance of scvhost.exe such that when allowed to run, scvhost will consume memory and cpu time until resources are maxed out. Whether this is malware or just the quality of programming we've come to expect, I don't yet know. Check what Silentbob said in another post. |
| lostinlodos | This is not necessarily for windows updates, it is also used as part of Microsoft's notoriously flawed "windows genuine advantage" program. On it's own, it's wholly useless, hogs as much bandwidth as it can get away with, is in constant communication with Microsoft, and is more of a personal information risk than anything else. If you've turned off automatic updates, then terminate this file. |
| ass raped | Hi not real roleplayinggames.com See also: Link |
| Juan Penas | if you has desactivated the autoupdate and the WUAUCLT.EXE still running, you are infected. Note the name in MAY, it's not wuauclt.exe, part of windows update. These homonimia evited the antivirus and spyware tools remove them |
| Juan Penas | this malware hung up internet connection. it's mimetize inwith the homonimous wuauclt.exe as WUAUCLT.EXE, so most of the antivirus and removal spyware can't detected them. If you have turnoff autoupdate and the WUAUCLT.EXE is running, you are infected |
| felix | Had the following trouble: data transfer while connected to the internet, but I didn't anything. TCPView showed, that IE is scanning ports somewhere. If I disable IE in msconfig, this does not happen. A check with HijackThis showed, that wualclt.exe might be involved. |
| Shought | Not dangerous at all, just the windows update process, usually found in system32, windows backup and installation folder See also: Link |
| ProLine [FIN] | no music anymore :D I lost my soundcard driver's and then came this! |
| Schnippshly | It makes my laptop go extremely slow and can't be deleted. It's a legitimate Windows file when in Windows/System32, but it never goes away on my laptop and really slows me down. |
| Fred | After years of no problems, it started causing endless 100% CPU utilization. I've disabled it both in the Control Panel Auto Updates and msconfig services. But how to update my machine now? |
| Nathan | Mine was just a normal windows file, however my friend had a problem with this a few months ago and it was a virus. If its causing problems, first let it run for a few min(10 min max) if it hasnt gone away shut off automatic updates in ctrl panel, if it still hasnt gone away, download any kind of delete on boot up software and get rid of it that way, or just do a search and delete all copies you can find. This program isnt needed, you can go to the windows site periodically to get updates if you need them. If this thing is causing any problems at all, squash it like a bug. |
| secureit | If you notice slow performance, and inability to access some or all internet sites, check for wuauclt1 in your c:\windows\system32\dllcache dir. Delete it there first (may also be in the prefetch dir) and then you can delete it from the system32 dir. May exist as an .exe or as a .cab file. Also search for ns7.exe and ftpuser.exe. This may be a valid system file, but it can definitely be exploited. |
| iamthebest | its the windows update thing but it lags your comp when updating |
| Walter | We're obliged to have wuauclt checking for security updates but I've spoken to Microsoft about why it seems to take 100% CPU while it's checking what updates it needs. Why can't it run itself with a lower priority? |
| terence gurry | its a prosses that looks for updates and if any tells you to install them |
| Rich S. (MCSE, CET, NTCIP) | I just fixed my systems. I did a search for WU* and there was a old version in my "c:\windows\prefetch" folder, that the os was loading and it was not the version that was in the system32 directroy. I flushed the prfetch cache, and rebooted 2 times, and it has cleared the problem. I suggest a free utility to do this is at http://CCLEANER.COM You will need to turn on clear prefetch, as this is a controversial cleanup option, but I now have a new reason to do this to systems I set up. See also: Link |
| | The are two processes in task manager 1.under name of wuauclt.exe and 2.Under the name of system |
|
|
