SDUpdate.exe
Spybot - Search & Destroy by Safer Networking Ltd. (Signed)
| Version: | 2.0.12.89 |
| MD5: | 452db84283eb2f043827ac95d62ce19c |
| SHA1: | 7aa218d9a013344469d870cbd58718d8df9ac421 |
| SHA256: | 6e4b03748f4b627ae32ad91ab3cb927462db2917471543af84e213a4338aa1a3 |
What is SDUpdate.exe?
Spybot-S&D 2 Background update service is the software updater program which runs in the background of Windows and automatically starts up when your PC boots. It checks
for software udpates and automatically downloads and installs them if found.
About SDUpdate.exe (from Safer Networking Ltd.)
“Spybot-S&D is free for private use. Even if you don’t see the symptoms, your computer may be infected. The creators of spyware are constantly developing new ways of invading your privacy. Team Spybot ”
Details
| File name: | sdupdate.exe |
| Publisher: | Safer-Networking Ltd. |
| Product name: | Spybot - Search & Destroy |
| Description: | Update |
| Typical file path: | C:\Program Files\spybot - search & destroy 2\sdupdate.exe |
| File version: | 2.0.12.89 |
| Product version: | 2.0.12.0 |
| Size: | 3.33 MB (3,487,240 bytes) |
| Certificate |
| Issued to: | Safer Networking Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Tuesday, March 20, 2012 |
| Expiration date: | Tuesday, April 7, 2015 |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Programs
The following program will install this file
Spybot Search & Destroy (S&D) is a spyware and adware removal computer program compatible with Microsoft Windows. It scans the computer hard disk and/or RAM for malicious software. In addition to spyware and adware detection and disinfection, Spybot-S&D can repair the registry, winsock LSPs, ActiveX objects, browser hijackers and BHOs, PUPS, computer cookies, trackerware, heavy duty, homepage hijackers, keyloggers, LSP, tracks, trojans,...
Behaviors
Scheduled tasks
- The task 'Check for updates (Spybot - Search & Destroy)' runs on logon in the path 'C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job'
- The job 'Check for updates' runs on logon in the path '\Safer-Networking\Spybot - Search and Destroy\Check for updates'
- Entry path 'C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job'
- Entry path '\Check for updates (Spybot - Search & Destroy)'
- Entry path '\Safer-Networking\Spybot - Search and Destroy\Check for updates'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path 'C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job'
- Login entry path '\Check for updates (Spybot - Search & Destroy)'
- Login entry path '\Safer-Networking\Spybot - Search and Destroy\Check for updates'
Windows firewall allowed programs
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe'
- Firewall exception for 'C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00160945% | |
| Kernel CPU: | 0.00097241% | |
| User CPU: | 0.00063704% | |
| Kernel CPU time: | 2,340,958 ms/min | |
| CPU cycles: | 390,123/sec | |
| Context switches: | 13/sec | |
| Memory |
| Private memory: | 15.1 MB | |
| Private (maximum): | 21.61 MB | |
| Private (minimum): | 2.42 MB | |
| Non-paged memory: | 15.1 MB | |
| Virtual memory: | 111.13 MB | |
| Virtual memory (peak): | 131.76 MB | |
| Working set: | 3.09 MB | |
| Working set (peak): | 41.38 MB | |
| Page faults: | 88,673/min | |
| I/O |
| I/O read transfer: | 57.91 KB/sec | |
| I/O read operations: | 2/sec | |
| I/O write transfer: | 36 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 1.24 KB/sec | |
| I/O other operations: | 24/sec | |
| Resource allocations |
| Threads: | 7 | |
| Handles: | 349 | |
| GUI GDI count: | 131 | |
| GUI USER count: | 61 | |
Process properties
| Integrety level: | System |
| Platform: | 64-bit |
| Command line: | "C:\Program Files\spybot - search & destroy 2\sdupdate.exe" /autoupdate /silent /autoclose |
| Owner: | SYSTEM |
| Parent processes: |
|
Threads
Averages
| rtl150.bpl |
| Total CPU: | 0.03502263% | |
| Kernel CPU: | 0.00669706% | |
| User CPU: | 0.02832557% | |
| CPU cycles: | 746,148/sec | |
| Memory: | 2.09 MB | |
| SDUpdate.exe (main module) |
| Total CPU: | 0.00409724% | |
| Kernel CPU: | 0.00124466% | |
| User CPU: | 0.00285258% | |
| CPU cycles: | 83,113/sec | |
| Memory: | 3.36 MB | |
| wow64.dll |
| Total CPU: | 0.00004015% | |
| Kernel CPU: | 0.00004015% | |
| User CPU: | 0.00000000% | |
| CPU cycles: | 1,553/sec | |
| Memory: | 276 KB | |
| ntdll.dll |
| Total CPU: | 0.00003639% | |
| Kernel CPU: | 0.00003291% | |
| User CPU: | 0.00000348% | |
| CPU cycles: | 593/sec | |
| Memory: | 1.66 MB | |
| RPCRT4.dll |
| Total CPU: | 0.00001059% | |
| Kernel CPU: | 0.00000000% | |
| User CPU: | 0.00001059% | |
| CPU cycles: | 6/sec | |
| Memory: | 780 KB | |
Common loaded modules
These are modules that are typiclaly loaded within the context of this process.
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
47.33% |
|
| Microsoft Windows XP |
10.00% |
|
| Windows 7 Professional |
9.33% |
|
| Windows 7 Ultimate |
7.33% |
|
| Windows 8 Pro with Media Center |
5.33% |
|
| Windows 8 |
4.67% |
|
| Windows 8.1 Pro |
4.00% |
|
| Windows 8 Single Language |
2.67% |
|
| Windows Vista Home Basic |
2.67% |
|
| Windows Vista Business |
2.67% |
|
| Windows Vista Home Premium |
2.67% |
|
| Windows 7 Home Basic |
1.33% |
|
Distribution by country
United States installs about 66.00% of Spybot - Search & Destroy.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
25.50% |
|
| Sony |
21.48% |
|
| Hewlett-Packard |
15.44% |
|
| ASUS |
9.40% |
|
| Acer |
7.38% |
|
| Intel |
5.37% |
|
| Lenovo |
4.03% |
|
| American Megatrends |
3.36% |
|
| Toshiba |
2.68% |
|
| Samsung |
2.68% |
|
| Alienware |
2.01% |
|
| GIGABYTE |
0.67% |
|
