wuauclt & wuaueng.dll (source ESENT) in Event Viewer

[Ummagumma]

Some data:
OS: XP Home Edition with latest critical updates, but not
complete SP2

Firewalls: Linksys BEFS41 router (hardware), XP's native
firewall, and Trend Micro's Internet Security 2004's
firewall

Antivirus: Trend Micro's Internet Security 2004 AV

QUESTION:

wuauclt & wuaueng.dll (source ESENT) in Event Viewer seem
to be going crazy. Nothing in Event User other than
these two entries seems problematic.

Upon rebooting, wuauclt shows up in Task Manager for
several minutes.

Any comments or suggestions?

 

[Mike Bright MSP]

If "wuauclt.exe" is running from the System32 directory then, it probably
going to be ok, it's the update client. However if it's not running from
there it could be a virus. Do a search on your system for the file, and see
where it is located. Like wise "wuaueng.dll" is also used by Windows Update
Services. Which is fine

Hope this helps

Mike Bright MCP, MSP

e:[email protected]

 

[Ummagumma]

Thank you for replying.

A search for wuauclt found it in C:\WINDOWS\I386 (38 KB
EX_File), in C:\WINDOWS\Prefetch (47 KB PF file),
C:\WINDOWS\system32\ (112 KB Application),
C:\WINDOWS\system32\ (164 KB Application) *called wuauclt1

and in C:\WINDOWS\ServicePackFiles\i386 (137 KB
Application)

 

[Mike Bright MSP]

That is fine, they are all in the correct place. Wouldnt worry about
anything untoward here.

Regards

Mike Bright MCP, MSP

e:[email protected]