Windows Update sending viruses?

[Eeyan]

Quarantined by Symantec AntiVirus:

Date Filename Virus
NameOriginal LocationStatus
18-08-04 16:02 TFTP2104 W32.Randex.gen C:\WINDOWS\system32\Infected
18-08-04 15:53 TFTP2140 W32.Spybot.Worm C:\WINDOWS\system32\Infected
18-08-04 15:18 TFTP2804 W32.Spybot.Worm C:\WINDOWS\system32\Infected

 

[Drew Tognola]

Eeyan,
Are you saying Windows Update downloaded these files? I seriously doubt it.
Probably downloaded through Kazaa or similar app.
Drew

 

[Eeyan]

Yup, I was running the Windows Update and the AV picked up on those,
also there are now 15 Zero byte files in the System32 folder all are
TFTP2XXX or 3XXX or 4XXX
I wasn't using anything else on line.
TFTP.EXE is also in system32 folder.

 

[Jason Tsang]

More likely your system was infected while windows update was running (and
not by windows update).

Did you have a firewall enabled when you were connected to Windowsupdate
(I'm guessing not).

 

[Jupiter Jones [MVP]]

While it is possible, it is extremely unlikely a virus or other
malware came from Windows Update.
You don't have to be doing anything to get something.
There are plenty that will come to the computer.
It does not matter if you are surfing, your browser can even be
closed.
All that is necessary is the connection.

Also AV applications will sometimes show a false positive from Windows
Update downloads.
In that case disable the AV during download and installation.
You may need to repair your AV or the manufacturer may have issues
they need to resolve.