20 August 2007
wuaudt.exe
wuaudt.exe is a Microsoft Windows operating system process that deals with automatic Windows updates. This program is a very important process for stable and secure running of your machine. Never ever close or stop running this process. Sometimes wuaudt.exe may be mixed with wuauclt.exe, but these processes are actually the same. The lowercase “c” and “l” sometimes look like a “d” with Windows Task Manager’s small font, especially with anti-aliasing enabled.
Moreover, symantec announces that there is such a trojan horse that copies itself as %System%\WUAUCLT.EXE.
Adds the value: “Microsoft auto update”=”%System%\wuauclt.exe” to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Runso that the Trojan runs when you start Windows. Connects to an IRC server to receive commands. By default, the Trojan will connect to irc.icq.com on port 6667 and join a specific channel.
So you better check your system if this process seems suspicious.
For more detailed info please check:
wuaudt.exe - wuaudt - Process Information