"TEMP:WINUPD.EXE"

Fraudulent Security Program

Free PC Cleanup from Webroot

Use Webroot SecureAnywhere to remove TEMP:WINUPD.EXE.

"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User

Get Free PC Cleanup

Associated Malware Groups

The filename is associated with the malware groups:

Fraudulent Security Program
Cloaked Malware

File Behavior

TEMP:WINUPD.EXE has been seen to perform the following behavior:

The Process is packed and/or encrypted using a software packing process
Found on infected systems and resists interrogation by security products

TEMP:WINUPD.EXE has been the subject of the following behavior:

Added as a Registry auto start to load Program on Boot up
Executed from Temporary Folders

Country Of Origin

The filename TEMP:WINUPD.EXE was first seen on Dec 15 2011 in the following geographical region of the Webroot community:

The United States on Dec 15 2011

File Name Aliases

TEMP:WINUPD.EXE can also use the following file names:

SLP9181350288966722455.TMP
SLP5816063905276397124.TMP
WINUPD7204.EXE
WINUPD9336.EXE
P9PL2272496111301415143.TMP
P9PL8143190532388952044.TMP
P9PL4218197739511992444.TMP
P9PL3683455485606299363.TMP
WINUPD5116.EXE
WINUPD3820.EXE
WINUPD5576.EXE
P9PL2237249294742947149.TMP
P9PL4891219672281948874.TMP
P9PL6165698725261177799.TMP
P9PL3455664139970147003.TMP
WINUPD21564.EXE
SLP8874232912369905388.TMP
SLP9194919062313898580.TMP
SLP6476729702939891814.TMP
P9PL60534917107187721.TMP
P9PL5432344689293503038.TMP
P9PL4117876128338722907.TMP
P9PL59342.TMP
WINUPD5840.EXE
P9PL814.TMP
P9PL3754495560994789744.TMP
P9PL1509156042636941979.TMP
WINUPD3932.EXE
DOWNLOADMANAGERSETUP[1].EXE
OSK.EXE
CMD.EXE
NOTEPAD.EXE
IEXPLORE.EXE
EXPLORER.EXE
BLINKXSS.EXE
ARES.EXE
CONTROL.EXE
LAUNCH.EXE
UNINST.EXE
MAGNIFY.EXE
NARRATOR.EXE
XLICONS.EXE
WORDICON.EXE
FIREFOX.EXE
CHROME.EXE
P9PL3078175924189518080.TMP
P9PL4764942080740696290.TMP
P9PL6813455575175728015.TMP
P9PL23521.TMP
P9PL310120667377740335.TMP
P9PL3658720542307576122.TMP
P9PL3578065611244016735.TMP
WINUPD1120.EXE
WINUPD2628.EXE
SLP3972867590162712455.TMP
SLP9168583902859159049.TMP
SLP7939721329700816052.TMP
92065213.EXE

Filesizes

The following file size has been seen:

126,464 bytes
242,688 bytes
133,120 bytes
124,928 bytes
131,072 bytes
253,952 bytes
131,584 bytes
238,080 bytes

File Type

The filename TEMP:WINUPD.EXE refers to many versions of an executable program.

Help the Webroot Community to fight cyber crime

We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.

The filename referred to in this report is often associated with PC infections. If you have a program of this name on your PC and would like to help our research please tell us what you know in the form below:

I have this file on my PC and believe it is an infection
I have this file on my PC and think it has made my PC slower
My firewall asked if I wanted to let this file have access to the Internet
My PC will not work since I noticed this file on it
My antivirus detected this file but won't remove it
I know what this file is and believe it is a Safe program
I am the author of this file and would like to discuss how to have it reclassified as safe

Further Comments or information you'd like to share: (optional)

Your email address if you would like us to contact you about this file and any concerns you may have: (optional)

Virus, Spyware & Malware Center »