Technology in terms you understand. Sign up for the Confident Computing newsletter for weekly solutions to make your life easier. Click here and get The Ask Leo! Guide to Staying Safe on the Internet — FREE Edition as my thank you for subscribing!
What is updater.exe?
Apparently there are several different files all named updater.exe. And so far most of them appear to be adware/spyware. This page has a fairly comprehensive list.
Become a Patron of Ask Leo! and go ad-free!
The bottom line is that you need to get and run a good anti-spyware program asap.
Subscribe to Confident Computing! Less frustration and more confidence, solutions, answers, and tips in your inbox every week.
I'll see you there!
Before commenting please:
Comments violating those rules will be removed. Comments that don't add value will be removed, including off-topic or content-free comments, or comments that look even a little bit like spam. All comments containing links and certain keywords will be moderated before publication.
I want comments to be valuable for everyone, including those who come later and take the time to read.
I found it in explorer in a windows & a program files folder. I use Ad-Ware and Spybot neither one removed it. I can’t delet it and it is not in Add/remover programs. When I log off it gives me a shut-down message
I run AVG virus sofware version 6.0 it found updater.exe in my C:\_RESTORE\TEMP folder my virus software cannot remove the file nor my Ad-aware anti spyware program. I have tried to manually delete the file but get an error message that says the file cannot be removed. The source file may be in use. Does anybody Know how i can get rid of this?
I also run AVG 6, and I get the same message…is this a false reading or is it true, and how do you get rid of it.I also have Norton and it dosent find
the updater.exe
Thanks
Do any of you have Iriver mp3 products? If so, this application “Updater.exe” is a part of the Iriver installation. I have experienced the “sign-off” sound that Dale had mentioned. I’ve asked Iriver to explain to me what it does as when it made the “sign-off” sound, it also connected to “shirley.jaboom.com” via the http protocol… err without my permission of course!
When I have an answer, I’ll post the response from Iriver.
I’ve also found it when doing a netstat -vb on my XP system. I also have a iriver software installed, but never really run any A/V or adware S/W… but I assume it is (as Paul mentioned) related to iriver, it also seems that a possible DNS alias for “shirley.jaboom.com” is a moodlogic one, as here is the info I got when
I tried to http to this URL:
“Apache/1.3.26 Server at my.moodlogic.net Port 80”
I gather iriver are in colusion with moodlogic to collect peoples music preferences, etc.
Damm iriver…I everyone says they are such a reputable company with great customer support! Curious to see their response to Paul…
Instead of trying to remove the program, you may want to consider just using Zone Alarm. ZA gives you the option to block certain programs from accessing the internet. I just used ZA to block updater.exe
use giant antivirus or giant antispyware. you lot could have dangerous spyware like that keylogger one. it was seeing every key i pressed! oh, and get norton 2005.
After uninstalling the iriver software and being told that I couldn’t remove “updater.exe”, I dragged it to the shredder in Spybot and chopped it up. There was another file associated with it, I didn’t write down the name of it (sorry). This I also shredded in spybot, did a restart and I haven’t heard from it since.
Updater.exe is a trojan.
You need to remove it using HiJackThis.
But have someone that knows how to operate that applications because you can crash your sytem.
Updater.exe is the Moodlogic Updater Application. It is a file associated with iRiver, and is NOT the trojan mentioned above. I am running Zone Alarm as well, and immediately after I installed the iRiver software Zone Alarm asked if I wanted to let Moodlogic access the internet. After reading these postings I told it to Deny.
If you have the updater.exe in the root of C: you don’t necessarily have the trojan. Look at the properties of the file and look for the description I typed above, and if it is there this file is likely OK to leave alone.
I have an iriver and when I installed it I got the silly moodlogic updater.exe. It pops up all day long and is extremely irritating. I cant do anything on line anymore. Its right on the Root C.
C:/updater.exe
how do I stop it……………….help, its driving us crazy and will NOT let me delete it.
I have norton Internet security 2005 and it just keeps asking me what I want to do, No matter what answer I give it just keeps doing it.
Here’s a simple way to get rid of Updater:
http://www.mlin.net/StartupCPL.shtml
This is Startup Control Panel (Freeware). It will let you easily disable the updater.exe from running at system startup.
Simple way to remove the Updater.exe pain in the butt? You bet. The link is most helpfull. Use the EXE vers. I could not remove this manually so I used the EXE vers. One click to delete, reboot, and then run again. Deleted permanently and XP search does not find a trace of this pain in the arse. Byte me IRiver. Kudos to the creator of this goodee. Many thanks.
I tried the spyware xoftspy no luck still have the stupid moodlogic popping up incesently..I dont under stand exe vers? sorry semi computer stupid. Please explain that one…thanks
Guys, My son installed iriver software after I purchased an mp3 player for him. Moodlogic was doing the same thing and driving me nuts! My son since then has gone back to another state, but I installed “Microsoft Antispyware Beta 1” for free and was able to delete updater.exe using the tool they give you. THey have an application agents checkpoint in it that tells you all of the things that are running on your system. Getting Norton 2005 is also a “MUST!”
the other file associated with updater.exe from Moodlogic via iRiver is catgen.exe, also in the root directory. I was able to simply clobber each of them.
I dunno, either, about the “excellent rep” of iRiver. I bought their iFP-799 player, which claimed to play .wma files; it didn’t so I followed all their bs instructions replacing firmware with same version, and the MusicManager with the same version, no joy. got them on the phone finally and after 1/2 hour jerking me around they told me that Windows Lossless format (a flavor of .wma) “just doesn’t work”. So I says of course “Why not mention that in the docs, or on the website?”. I wouldn’t have liked it but it wouldn’t have caused me to return the product. But the deception did, F*** iRiver.
hi
i install Symantec antivirus to my pc ofter instal SAV i try to update latest patch ofter 70% uptation it is giving error Application Error
UPDATER Caused a Genera protection Fault in module UPDATER.EXE at 0001:ACF4
Choose close .UPDATER will colse
So pls give me solution pls
I just got this “updater.exe” box with Norton asking if i would allow or deny it’s access. I don’t have the iriver everyone is talking about. But is it a coincidence that today right before it 2 things happened: 1) I downloaded a upromise thing called “remindu” ? 2) A storm knocked out my power twice for a few seconds ?
Interesting link about CATGEN.EXE. It is classified as spyware.
http://spywarefiles.prevx.com/RRHFEB46753/CATGEN.EXE.html
Thanks all for the info about update.exe, I’ve been living with that tumor for a year.
If you have an iRiver, it is possible to upgrade your firmware so it appears as a USB drive, and you can uninstall the whole iRiver application forever.
my pc always says it cant find the updater exe
whats that about
I am running windows 7. I get a windows warning asking me if i want to install updater.exe. I say no and it goes away for an hour and then reopens asking if I want to open. Is this a real file I need to open? If not how do i get it to go away permanently. I have run malware bytes and AVAST and neither finds anything