wuauclt & wuaueng.dll (source ESENT) in Event Viewer

Some data:
OS: XP Home Edition with latest critical updates, but not
complete SP2

Firewalls: Linksys BEFS41 router (hardware), XP's native
firewall, and Trend Micro's Internet Security 2004's
firewall

Antivirus: Trend Micro's Internet Security 2004 AV

QUESTION:

wuauclt & wuaueng.dll (source ESENT) in Event Viewer seem
to be going crazy. Nothing in Event User other than
these two entries seems problematic.

Upon rebooting, wuauclt shows up in Task Manager for
several minutes.

Any comments or suggestions?

If "wuauclt.exe" is running from the System32 directory then, it probably
going to be ok, it's the update client. However if it's not running from
there it could be a virus. Do a search on your system for the file, and see
where it is located. Like wise "wuaueng.dll" is also used by Windows Update
Services. Which is fine

Hope this helps

Mike Bright MCP, MSP

e:mike.bright@brightweb.co.uk

Thank you for replying.

A search for wuauclt found it in C:\WINDOWS\I386 (38 KB
EX_File), in C:\WINDOWS\Prefetch (47 KB PF file),
C:\WINDOWS\system32\ (112 KB Application),
C:\WINDOWS\system32\ (164 KB Application) *called wuauclt1

and in C:\WINDOWS\ServicePackFiles\i386 (137 KB
Application)

>-----Original Message-----
>If "wuauclt.exe" is running from the System32 directory
then, it probably
>going to be ok, it's the update client. However if it's
not running from
>there it could be a virus. Do a search on your system
for the file, and see
>where it is located. Like wise "wuaueng.dll" is also
used by Windows Update
>Services. Which is fine
>
>Hope this helps
>
>Mike Bright MCP, MSP
>
>e:mike.bright@brightweb.co.uk
>
>
>
>.
>

That is fine, they are all in the correct place. Wouldnt worry about
anything untoward here.

Regards

Mike Bright MCP, MSP

e:mike.bright@brightweb.co.uk