VideoHelp Forum

Try DVDFab and download streaming video, copy, convert or make Blu-rays,DVDs! Download free trial !
+ Reply to Thread
Results 1 to 16 of 16
Thread
  1. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    Comodo Internet Security recently started reporting "C:\Windows\System32\wuaueng2.dll" as "Unrecognized". File description is "Windows Update Agent". Was this part of a recent update? What is it about?
    Quote Quote  
  2. Member
    Join Date
    Feb 2006
    Location
    United States
    Search Comp PM
    1st - check to see if your antivirus software up to date ??
    see this post - https://file-intelligence.comodo.com/windows-process-virus-malware/DLL/WUAUENG
    Quote Quote  
  3. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    I found that both "wuaueng2.dll" and "wuaueng.dll" are in the same folder. Comodo Internet Security is up to date, but only reports "wuaueng2.dll" and does not offer to remove it.
    Last edited by kyrcy; 23rd Feb 2020 at 12:10.
    Quote Quote  
  4. I'm a Super Moderator johns0's Avatar
    Join Date
    Jun 2002
    Location
    canada
    Search Comp PM
    It's a windows file and isn't essential,it's your comodo that's at fault.
    I think,therefore i am a hamster.
    Quote Quote  
  5. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    Originally Posted by johns0 View Post
    It's a windows file and isn't essential,it's your comodo that's at fault.
    What do you mean isn't essential?
    Quote Quote  
  6. I'm a Super Moderator johns0's Avatar
    Join Date
    Jun 2002
    Location
    canada
    Search Comp PM
    Means it's not required for running windows,it's an update item.
    I think,therefore i am a hamster.
    Quote Quote  
  7. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    I believe it's an update for Windows Update Agent.

    https://support.microsoft.com/en-us/help/949104/how-to-update-the-windows-update-agent...latest-version

    But I wonder why Comodo did not complain about this before.
    Quote Quote  
  8. aBigMeanie aedipuss's Avatar
    Join Date
    Oct 2005
    Location
    666th portal
    Search Comp PM
    lots of times virus/trojans hide as files that sound like windows files. i have no wuaueng2.dll in my systems folder, but i do have wuaueng.dll(the update agent). i'd upload it to https://www.virustotal.com/gui/home/upload and see if other anti-virus also think it's suspicious.
    --
    "a lot of people are better dead" - prisoner KSC2-303
    Quote Quote  
  9. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    Originally Posted by aedipuss View Post
    lots of times virus/trojans hide as files that sound like windows files. i have no wuaueng2.dll in my systems folder, but i do have wuaueng.dll(the update agent). i'd upload it to https://www.virustotal.com/gui/home/upload and see if other anti-virus also think it's suspicious.
    "No engines detected this file" for both "wuaueng.dll" and "wuaueng2.dll". File hashes are different, but Virustotal detects both as "wuaueng.dll".
    Quote Quote  
  10. Member
    Join Date
    Jan 2019
    Location
    Europe
    Search Comp PM
    You could try to run sfc /scannow to be on the safe side.
    Quote Quote  
  11. aBigMeanie aedipuss's Avatar
    Join Date
    Oct 2005
    Location
    666th portal
    Search Comp PM
    yeah,,,,,,, i'd be deleting the "2" file if it were me. it shouldn't have a name close to the actual windows file. if it's a for real windows file you could download it again later if needed.
    --
    "a lot of people are better dead" - prisoner KSC2-303
    Quote Quote  
  12. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    C:\>sfc /verifyfile=c:\windows\system32\wuaueng.dll


    Windows Resource Protection did not find any integrity violations.

    C:\>sfc /verifyfile=c:\windows\system32\wuaueng2.dll


    Windows Resource Protection could not perform the requested operation.
    Quote Quote  
  13. aBigMeanie aedipuss's Avatar
    Join Date
    Oct 2005
    Location
    666th portal
    Search Comp PM
    Originally Posted by kyrcy View Post
    C:\>sfc /verifyfile=c:\windows\system32\wuaueng.dll


    Windows Resource Protection did not find any integrity violations.

    C:\>sfc /verifyfile=c:\windows\system32\wuaueng2.dll


    Windows Resource Protection could not perform the requested operation.


    could be because wuaueng2.dll is not a windows resource....
    --
    "a lot of people are better dead" - prisoner KSC2-303
    Quote Quote  
  14. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    Latest Malwarebytes (Free) detects nothing.
    Quote Quote  
  15. Member
    Join Date
    Mar 2008
    Location
    United States
    Search Comp PM
    Originally Posted by kyrcy View Post
    Latest Malwarebytes (Free) detects nothing.
    You can search the registry for references to this file,
    secondly you can use something like Agent Ransack to see if you can find any references to it from an
    exe file. (You can also repeat this search to see if another dll references this dll) For example:
    Image Attached Thumbnails Click image for larger version

Name:	w1.jpg
Views:	29
Size:	106.1 KB
ID:	52146  

    Click image for larger version

Name:	w2.jpg
Views:	28
Size:	280.5 KB
ID:	52147  

    Last edited by davexnet; 24th Feb 2020 at 13:53.
    Quote Quote  
  16. Member
    Join Date
    Aug 2005
    Location
    Europe
    Search PM
    I think "wuaueng2.dll" is related to Simplix UpdatePack.
    Quote Quote  



Similar Threads