updater.exe

Read the article that everyone's commenting on.
Subscribe to the RSS Feed for comments on this article.

I found it in explorer in a windows & a program files folder. I use Ad-Ware and Spybot neither one removed it. I can't delet it and it is not in Add/remover programs. When I log off it gives me a shut-down message

I run AVG virus sofware version 6.0 it found updater.exe in my C:\_RESTORE\TEMP folder my virus software cannot remove the file nor my Ad-aware anti spyware program. I have tried to manually delete the file but get an error message that says the file cannot be removed. The source file may be in use. Does anybody Know how i can get rid of this?

I also run AVG 6, and I get the same message...is this a false reading or is it true, and how do you get rid of it.I also have Norton and it dosent find
the updater.exe

Thanks

Do any of you have Iriver mp3 products? If so, this application "Updater.exe" is a part of the Iriver installation. I have experienced the "sign-off" sound that Dale had mentioned. I've asked Iriver to explain to me what it does as when it made the "sign-off" sound, it also connected to "shirley.jaboom.com" via the http protocol... err without my permission of course!

When I have an answer, I'll post the response from Iriver.

I've also found it when doing a netstat -vb on my XP system. I also have a iriver software installed, but never really run any A/V or adware S/W... but I assume it is (as Paul mentioned) related to iriver, it also seems that a possible DNS alias for "shirley.jaboom.com" is a moodlogic one, as here is the info I got when
I tried to http to this URL:
"Apache/1.3.26 Server at my.moodlogic.net Port 80"

I gather iriver are in colusion with moodlogic to collect peoples music preferences, etc.

Damm iriver...I everyone says they are such a reputable company with great customer support! Curious to see their response to Paul...

Instead of trying to remove the program, you may want to consider just using Zone Alarm. ZA gives you the option to block certain programs from accessing the internet. I just used ZA to block updater.exe

use giant antivirus or giant antispyware. you lot could have dangerous spyware like that keylogger one. it was seeing every key i pressed! oh, and get norton 2005.

After uninstalling the iriver software and being told that I couldn't remove "updater.exe", I dragged it to the shredder in Spybot and chopped it up. There was another file associated with it, I didn't write down the name of it (sorry). This I also shredded in spybot, did a restart and I haven't heard from it since.

Updater.exe is a trojan.
You need to remove it using HiJackThis.
But have someone that knows how to operate that applications because you can crash your sytem.

Updater.exe is the Moodlogic Updater Application. It is a file associated with iRiver, and is NOT the trojan mentioned above. I am running Zone Alarm as well, and immediately after I installed the iRiver software Zone Alarm asked if I wanted to let Moodlogic access the internet. After reading these postings I told it to Deny.

If you have the updater.exe in the root of C: you don't necessarily have the trojan. Look at the properties of the file and look for the description I typed above, and if it is there this file is likely OK to leave alone.

To post a comment on "updater.exe", please return to that article's main page.