Should I block it?

90%

90% of PCs block this file from running.

Possible reason:

Multiple malware detections

Additional versions

16.32.0.1887 101896	20.00%
16.31.0.1850 101410	6.67%
16.27.0.1770 99672	6.67%
16.27.0.1770 99672	20.00%
16.24.0.1683 97836	6.67%
16.24.0.1683 97836	33.33%
16.17.0.1350 95373	6.67%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

StartServiceCtrlDispatcherW, RegisterServiceCtrlHandlerW, SetServiceStatus, StartServiceW, OpenServiceW, DeleteService, OpenSCManagerW, CreateServiceW, ChangeServiceConfig2W, CloseServiceHandle, RegCloseKey, RegOpenKeyExW, RegQueryValueExW, ConvertStringSecurityDescriptorToSecurityDescriptorW

kernel32.dll

EnterCriticalSection, LeaveCriticalSection, WaitForSingleObject, DeleteCriticalSection, OpenEventW, CreateEventW, InitializeCriticalSection, GetModuleHandleW, GetCommandLineW, CreateThread, CloseHandle, GetFileAttributesW, LoadLibraryExW, GetLastError, GetModuleFileNameW, LoadLibraryW, GetProcAddress, Sleep, FreeLibrary, SetEvent, LocalFree, GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, GetCurrentProcess, TerminateProcess, GetStartupInfoW, HeapSetInformation, InterlockedCompareExchange, InterlockedExchange, DecodePointer, EncodePointer, GetSystemTimeAsFileTime

msvcp100.dll

DllMain

msvcr100.dll

DllMain

shell32.dll

CommandLineToArgvW

shlwapi.dll

PathAddBackslashW, PathAppendW, PathRemoveFileSpecW, PathIsRelativeW

winmm.dll

timeGetTime

updatesrv.exe

Bitdefender 2013 by Bitdefender SRL (Signed)

Remove updatesrv.exe

Version:	16.27.0.1770 99672
MD5:	1c5835420f2a8f6d683fd6bdffa2ffdd
SHA1:	3b48f0ee1ae1475503591091760627dc80d5fd8c
SHA256:	e5b3ab710503cfd54659dc8bf804c8b167471c6e8eacc7e9eb83177eb027f4ca

Warning 5 antivirus scanners has detected malware.

What is updatesrv.exe?

Bitdefender Update Service is part of Bitdefender, an antivirus software suite developed by Romania-based software company Softwin. Bitdefender is designed to protect computers from viruses and spyware. Unlike the commercial version, the free tools only offer an on-demand virus scanning and doesn't provide real time scanning.

About updatesrv.exe (from Bitdefender SRL)

“Bitdefender 2013 builds on #1 ranked antivirus technology to secure online transactions, protect mobile devices from theft, automatically back up files, and Tune-Up PCs. Active Virus Control is a proa”

Details

File name:	updatesrv.exe
Publisher:	Bitdefender
Product name:	Bitdefender 2013
Description:	Bitdefender Update Service
Typical file path:	C:\Program Files\bitdefender\bitdefender 2013\updatesrv.exe
File version:	16.27.0.1770 99672
Size:	54.67 KB (55,984 bytes)
Certificate
Issued to:	Bitdefender SRL
Authority (CA):	VeriSign
Expiration date:	Friday, December 14, 2012
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 10.0
.NET CLR:	No

More details

Behaviors

Services

Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)

'UPDATESRV' (Bitdefender Desktop Update Service)
UPDATESRV

Malware detections

Based on 40+ industry antivirus scanners, 5 of them detected the following malware.

Antivirus engine	Engine version	Detection
Clam AntiVirus	0.97.3.0	Win.Trojan.Zbot-14509
McAfee	5.400.1158	Artemis!1C5835420F2A
McAfee Gateway Anti-Malware	v2013-dat	Artemis!1C5835420F2A
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V0329
Vba32 AntiVirus	3.12.22.2	Trojan.Agent

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00139467%	0.028634%
Kernel CPU:	0.00085878%	0.013761%
User CPU:	0.00053588%	0.014873%
Kernel CPU time:	625 ms/min	100,923,805ms/min
Context switches:	2/sec	284/sec
Memory
Private memory:	5.29 MB	21.59 MB
Private (maximum):	3.38 MB
Private (minimum):	856 KB
Non-paged memory:	5.29 MB	21.59 MB
Virtual memory:	60.82 MB	140.96 MB
Virtual memory (peak):	61.82 MB	169.69 MB
Working set:	2.23 MB	18.61 MB
Working set (peak):	7.87 MB	37.95 MB
Page faults:	6,998/min	2,039/min
I/O
I/O read transfer:	865 Bytes/sec	1.02 MB/min
I/O read operations:	118/sec	343/min
I/O write transfer:	3.32 KB/sec	274.99 KB/min
I/O write operations:	19/sec	227/min
I/O other transfer:	24 Bytes/sec	448.09 KB/min
I/O other operations:	5/sec	1,671/min
Resource allocations
Threads:	19	12
Handles:	213	600
GUI GDI count:	4	103
GUI USER count:	3	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command line:	"C:\Program Files\bitdefender\bitdefender 2013\updatesrv.exe" /service
Owner:	SYSTEM
Windows Service
Service name:	UPDATESRV
Display name:	Bitdefender Desktop Update Service
Description:	“Downloads Bitdefender updates and new malware signatures from the Internet.”
Type:	Win32OwnProcess
Parent process:	services.exe (Services and Controller app by Microsoft)

Threads

Averages

framework.dll (Bitdefender 2013 by Bitdefender)
Total CPU:	0.00033264%	0.272967%
Kernel CPU:	0.00000000%	0.107585%
User CPU:	0.00033264%	0.165382%
Memory:	152 KB	1.16 MB
log.dll (Bitdefender by Bitdefender)
Total CPU:	0.00006438%
Kernel CPU:	0.00004292%
User CPU:	0.00002146%
Context switches:	2/sec
Memory:	284 KB
npcomm.dll (BitDefender 15 by BitDefender LLC)
Total CPU:	0.00005365%
Kernel CPU:	0.00003219%
User CPU:	0.00002146%
Memory:	116 KB
connector.dll (Bitdefender 2013 by Bitdefender)
Total CPU:	0.00004292%
Kernel CPU:	0.00002146%
User CPU:	0.00002146%
Memory:	112 KB
updatemgr.dll (Bitdefender by Bitdefender)
Total CPU:	0.00002146%
Kernel CPU:	0.00002146%
User CPU:	0.00000000%
Memory:	452 KB
updatesrv.exe (main module)
Total CPU:	0.00002146%
Kernel CPU:	0.00000000%
User CPU:	0.00002146%
Memory:	60 KB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

updatemgr.dll (Bitdefender by BitDefender SRL)

Distribution by Windows OS

OS version	distribution
Windows 8 Pro	33.33%
Windows 7 Home Premium	20.00%
Windows 8 Pro with Media Center	20.00%
Windows 7 Ultimate	6.67%
Windows 8	6.67%
Microsoft Windows XP	6.67%
Windows 7 Ultimate N	6.67%

Distribution by country

United States installs about 53.33% of Bitdefender 2013.

Distribution by PC manufacturer

PC Manufacturer	distribution
Lenovo	26.67%
Dell	26.67%
Hewlett-Packard	20.00%
ASUS	13.33%
Alienware	6.67%
GIGABYTE	6.67%

Remove Adware and Spyware Programs, FREE Download!