Prevx Research Division
SERVICEUPD.EXE
Malicious SoftwareYour PC may be infected. The presence of a file called SERVICEUPD.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx will scan your PC in less than two minutes and check for millions of spyware and malware infections including SERVICEUPD.EXE. Don't put your confidential data, or your identity at risk, check your PC now with Prevx.
File Behavior
SERVICEUPD.EXE has been seen to perform the following behavior:
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- This process creates other processes on disk
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Creates a new Background Service on the machine
- The Process is packed and/or encrypted using a software packing process
SERVICEUPD.EXE has been the subject of the following behavior:
- Created as a process on disk
- Added as a Registry Key (RUNONCE) to auto start Programs on system start up
- Executed as a Process
- Deleted as a process from disk
- Has code inserted into its Virtual Memory space by other programs
- Created as a new Background Service on the machine
Country Of Origin
The filename SERVICEUPD.EXE was first seen on Jun 6 2007 in the following geographical regions of the Prevx community:
- The United States on Jun 6 2007
- Greece on Jun 6 2007
- Canada on Jul 20 2007
- Italy on Jul 20 2007
File Name Aliases
SERVICEUPD.EXE can also use the following file names:
- WINSERVICE32.EXE
- WINKERNELUPD.EXE
- WIN32KERNELUPD.EXE
- DLLREGSERV32.EXE
- MSNFO32.EXE
Filesizes
The following file size has been seen:
- 44,544 bytes
- 156,160 bytes
- 40,448 bytes
- 26,112 bytes
Vendor, Product and Version Information
Files with the name SERVICEUPD.EXE have been seen to have the following Vendor, Product and Version Information in the file header:
- ServiceUpd; ServiceUpd; 2.0
File Type
The filename SERVICEUPD.EXE is used by multiple object types including executable programs,Dynamic Link LIbraries.