Versions

16.32.0.1887 101896	20.00%
16.31.0.1850 101410	6.67%
16.27.0.1770 99672	6.67%
16.27.0.1770 99672	20.00%
16.24.0.1683 97836	6.67%
16.24.0.1683 97836	33.33%
16.17.0.1350 95373	6.67%

Warning 8 antivirus scanners has detected malware in various versions of updatesrv.exe.

There are 7 versions of updatesrv.exe in the wild, the latest version being 16.32.0.1887 101896. It is started as a Windows Service called 'Bitdefender Desktop Update Service' with the name 'UPDATESRV' and described as “Downloads Bitdefender updates and new malware signatures from the Internet.”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 61.24 KB. The file is a digitally signed and issued to Bitdefender SRL by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0025% including both foreground and background operations, the average private memory consumption is about 4.82 MB with the maximum memory reaching around 15.61 MB. Addionally, typically read and write I/O disk operations is about 1.67 KB per minute for reads and 6.92 KB per minute for writes.

Bitdefender Update Service is part of Bitdefender, an antivirus software suite developed by Romania-based software company Softwin. Bitdefender is designed to protect computers from viruses and spyware. Unlike the commercial version, the free tools only offer an on-demand virus scanning and doesn't provide real time scanning.

Based on 40+ industry antivirus scanners, 8 of them detected the following malware.