PC Pitstop is the undisputed leader in PC diagnostics. Our running process library is culled from our database of over 100 million PC diagnostics and scans.

Tip from the PitCrew

Every process running on your computer takes up CPU cycles and valuable memory. For optimal PC performance and resource utilization, you should be aware of every process on your computer. PC Pitstop designed this process library to help you know which processes are worthwhile and others that slow system performance.

Furthermore, perhaps the quickest and most straight forward method to detect malware is through a running process analysis.

Process Library

  

More than one possible match was found; all matches are listed below in order of their prevalence. This only tells you what the file and the correct action might be.

To understand which possibility is actually running on your own system, perform an Overdrive test and then look at the Software|Processes tab.


Match #1

update.exe (Microsoft Update)

Percentage of recently scanned PC's with this process running: 0.25%
Average CPU use for this program: 10%
Average RAM for this program: 13 MB


PC Pitstop Analysis

update.exe - This is a generic exe file for update, used to update any Microsoft program. It should be loaded just while the process is in progress. Rebooting the system should clear this out.


Recommendation

Win Patrol

update.exe is an essential part of Windows and required for Windows to work properly. It should never be disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, update.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:Microsoft Corporation
Product contains:Windows

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called update.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
update.exe> 20
#MD5Size
10xb31bf35156dbb7349be95d8ff25a1382724704 bytes
20x87a1c108d30d59511c596d385a1234e4726752 bytes
30x46306f5693c221f6f383649d7fc74026765304 bytes
40xc5140c3f32cbeccf30e4037948805474654336 bytes
50xcb10fb06b778bbe75ef8968eb9ff24c1760696 bytes
60xc1fbbf95adb4c68c7f966c0f00bf009c760696 bytes
70x0b630c8656b1ea82c82b929d51fa351b716000 bytes
80x6c77aae610403f3d0788aa8548dcda40727776 bytes
90x1f7e2678a9c800457afc931cbde070f9360960 bytes
100xfb5c337800ed35091f3d95f3ff34b3f9655872 bytes
110x83b48cd1beb94350803b5f5e93754c9f765304 bytes
120xf40a47a5e0eaccd100375bcd1b4d3152720096 bytes
130xbb2c604d0a3ca5ec8f138cc116ddde0c668160 bytes
140xb9fa27bea6b6fb59cd79aa46e58f9176742192 bytes
150x3b5eaaedb8a9d3f98debbdb0cfd214d5718048 bytes
160x3776538e4371dbda117a3b2199a230de654848 bytes
170xc0011df5faaabd9ba3dd546cb8028a71659456 bytes
180x517c7044e673993858d94c754884e095721120 bytes
190x0ff4e4e0dd01e7872d9c2013560fd4a7755576 bytes
200x50914702cb6c72275018643c557ef8c5743216 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. update.exe (Microsoft Update) has been seen on 0.25% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 13 MB. The average CPU load for this program was 10%.


Detailed Description and/or Removal Instructions

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deployment/winupdte.mspx


Match #2

update.exe (PC Tools Smart Update - Spyware Doctor)

Percentage of recently scanned PC's with this process running: 0.00%
Average CPU use for this program: 0%
Average RAM for this program: 4 MB


PC Pitstop Analysis

update.exe - PC Tools Smart Update for Spyware Doctor


Recommendation

Win Patrol

update.exe is required by third-party software or hardware and should not disabled.

PC Pitstop recommends WinPatrol Plus for monitoring all of the background activity on your PC. WinPatrol Plus provides a easy to understand descriptions of over 15,000 processes and programs.



Identification

In addition to the file name, update.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

Vendor contains:PC Tools
Product contains:PC Tools Smart Update

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called update.exe, we have detected more than 20 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
update.exe> 20
#MD5Size
10x7ede19cbdbc94d1dc95aa355c28088b31896016 bytes
20xb137ae7c0c452bb9988205bc920284271763208 bytes
30x5ba0339cfb597766f7182729d527549f1800048 bytes
40x13b3d908cbe26f9a0ee66291f10def5a1795976 bytes
50xe163e26c27405d1d8dc16094a780d1301857416 bytes
60xb9bf21ce4f00fc942ab1b04d4abe20ac1857416 bytes
70x630effd6a580d7ebbadee84a172b04621857416 bytes
80x3ac5ae179c32df28c24c709cbc1dda851794048 bytes
90x2e6740f6f671fb65b5c8da4f4ea4f7191947528 bytes
100xe2858b1040aa72076cc6b0a2bdb9335f1848728 bytes
110x55ffa21f455fe486e6246535c317908a1583228 bytes
120x7f93a450fd25589618205dc481d1137d1574572 bytes
130xc913df9553940037bac2a519645227b11951624 bytes
140xe91af2be769abe841b60a8fbd4acdb541798144 bytes
150x587118e965eae9aa5abad4fe3dd4e2d41947560 bytes
160xce0b9cee0ae64b941b58411d36768fb71906576 bytes
170x7229f934de4cac7450ee08b2480d3af21816472 bytes
180x36c5d2b4f0cfc17db251542ef9ed73512099080 bytes
190xd04336b76b3c2c19e67ea2e00ed873562189208 bytes
200x921b1d98cb42778e47b6e7b0d2a102741875968 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. update.exe (PC Tools Smart Update - Spyware Doctor) has been seen on 0.00% of systems tested at PC Pitstop. As a point of comparison, it is rare for a particular malicious program (virus or spyware) to be seen on more than one or two percent of all systems tested. The average RAM memory usage for this process was 4 MB. The average CPU load for this program was 0%.


Vendor or Distributor's Web Site

http://www.pctools.com/spyware-doctor/


Match #3

update.exe (PWS-Hangame (McAfee))

This program has not been seen on any systems tested at PC Pitstop in the past week.


PC Pitstop Analysis

SubType: Password Stealer.

Accordint to McAfee:

This is a trojan detection. Unlike viruses, trojans do not self-replicate. They are spread manually, often under the premise that they are beneficial or wanted. The most common installation methods involve system or security exploitation, and unsuspecting users manually executing unknown programs. Distribution channels include email, malicious or hacked web pages, Internet Relay Chat (IRC), peer-to-peer networks, etc.


Recommendation

PC Pitstop Exterminate

update.exeDISABLE AND REMOVE. Intrusive adware or spyware.

PC Pitstop Exterminate removes update.exe and all other forms of malware and spyware. Run a free scan and analysis to learn how to quickly and easily rid your computer of adware and spyware.



Identification

In addition to the file name, update.exe, the following version information is used to identify the file. If the file does not match this information, it may be a different file. To ensure the file is absolutely correct, run a free and comprehensive scan.

File name contains:\System32\

To view version information with Windows Explorer, right-click the file and click Properties, Version.


MD5 Hashes

MD5 hashes is the way that computers can define the uniqueness of a file. Anti malware vendors frequently use this technique to detect and clean malware. It is common for a program to have multiple MD5 hashes as the developers create newer versions of the program. For the program called update.exe, we have detected 2 different MD5 hashes. Click on a hash to research the hash in Google.
MD5 Report Summary
Program NameMD5 Count
update.exe2
#MD5Size
10xa449407e79128b0333f0de23b1abf2c329696 bytes
20x52d525a223cd29ce3737752506d17adb765952 bytes

PC Pitstop Database Comparisons

Every week, we update our information about the running programs identified during the previous week's testing. This program has not been seen on any systems tested at PC Pitstop in the past week.


Detailed Description and/or Removal Instructions

http://vil.nai.com/vil/content/v_133352.htm

Important note: A file name alone may not be enough for positive identification. PC Pitstop's Overdrive tests and spyware scan use information such as the company name, product name, or install directory. If you are unable to identify a file, ask about it in our forums after running our full tests.