Helping people with computers... one answer at a time.

There are many files with the name updater.exe, but so far most of them appear to be adware or spyware.

What is updater.exe?

Apparently there are several different files all named updater.exe. And so far most of them appear to be adware/spyware. This page has a fairly comprehensive list.

The bottom line is that you need to get and run a good anti-spyware program asap.

Article C2177 - September 1, 2004 « »

Share this article with your friends:

Share this article on Facebook Tweet this article Email a link to this article
Leo Leo A. Notenboom has been playing with computers since he was required to take a programming class in 1976. An 18 year career as a programmer at Microsoft soon followed. After "retiring" in 2001, Leo started Ask Leo! in 2003 as a place for answers to common computer and technical questions. More about Leo.

Not what you needed?

22 Comments
Dale
September 14, 2004 6:07 PM

I found it in explorer in a windows & a program files folder. I use Ad-Ware and Spybot neither one removed it. I can't delet it and it is not in Add/remover programs. When I log off it gives me a shut-down message

Jeff
September 22, 2004 11:31 AM

I run AVG virus sofware version 6.0 it found updater.exe in my C:\_RESTORE\TEMP folder my virus software cannot remove the file nor my Ad-aware anti spyware program. I have tried to manually delete the file but get an error message that says the file cannot be removed. The source file may be in use. Does anybody Know how i can get rid of this?

Anonymous
October 10, 2004 8:22 PM

I also run AVG 6, and I get the same message...is this a false reading or is it true, and how do you get rid of it.I also have Norton and it dosent find
the updater.exe

Thanks

Paul
October 13, 2004 7:39 PM

Do any of you have Iriver mp3 products? If so, this application "Updater.exe" is a part of the Iriver installation. I have experienced the "sign-off" sound that Dale had mentioned. I've asked Iriver to explain to me what it does as when it made the "sign-off" sound, it also connected to "shirley.jaboom.com" via the http protocol... err without my permission of course!

When I have an answer, I'll post the response from Iriver.

joe_schmo
October 13, 2004 9:01 PM

I've also found it when doing a netstat -vb on my XP system. I also have a iriver software installed, but never really run any A/V or adware S/W... but I assume it is (as Paul mentioned) related to iriver, it also seems that a possible DNS alias for "shirley.jaboom.com" is a moodlogic one, as here is the info I got when
I tried to http to this URL:
"Apache/1.3.26 Server at my.moodlogic.net Port 80"

I gather iriver are in colusion with moodlogic to collect peoples music preferences, etc.

Damm iriver...I everyone says they are such a reputable company with great customer support! Curious to see their response to Paul...

bubba
October 24, 2004 5:55 AM

Instead of trying to remove the program, you may want to consider just using Zone Alarm. ZA gives you the option to block certain programs from accessing the internet. I just used ZA to block updater.exe

none
November 13, 2004 4:13 AM

use giant antivirus or giant antispyware. you lot could have dangerous spyware like that keylogger one. it was seeing every key i pressed! oh, and get norton 2005.

Bill
February 23, 2005 12:48 PM

After uninstalling the iriver software and being told that I couldn't remove "updater.exe", I dragged it to the shredder in Spybot and chopped it up. There was another file associated with it, I didn't write down the name of it (sorry). This I also shredded in spybot, did a restart and I haven't heard from it since.

Steve
March 17, 2005 1:48 PM

Updater.exe is a trojan.
You need to remove it using HiJackThis.
But have someone that knows how to operate that applications because you can crash your sytem.

Sean
July 5, 2005 8:22 AM

Updater.exe is the Moodlogic Updater Application. It is a file associated with iRiver, and is NOT the trojan mentioned above. I am running Zone Alarm as well, and immediately after I installed the iRiver software Zone Alarm asked if I wanted to let Moodlogic access the internet. After reading these postings I told it to Deny.

If you have the updater.exe in the root of C: you don't necessarily have the trojan. Look at the properties of the file and look for the description I typed above, and if it is there this file is likely OK to leave alone.

holly
August 20, 2005 4:53 PM

I have an iriver and when I installed it I got the silly moodlogic updater.exe. It pops up all day long and is extremely irritating. I cant do anything on line anymore. Its right on the Root C.

C:/updater.exe

how do I stop it...................help, its driving us crazy and will NOT let me delete it.
I have norton Internet security 2005 and it just keeps asking me what I want to do, No matter what answer I give it just keeps doing it.

Phillip
August 21, 2005 3:36 PM

Here's a simple way to get rid of Updater:

http://www.mlin.net/StartupCPL.shtml

This is Startup Control Panel (Freeware). It will let you easily disable the updater.exe from running at system startup.

Rockie
August 24, 2005 8:20 PM

Simple way to remove the Updater.exe pain in the butt? You bet. The link is most helpfull. Use the EXE vers. I could not remove this manually so I used the EXE vers. One click to delete, reboot, and then run again. Deleted permanently and XP search does not find a trace of this pain in the arse. Byte me IRiver. Kudos to the creator of this goodee. Many thanks.

Holly
September 2, 2005 6:59 PM

I tried the spyware xoftspy no luck still have the stupid moodlogic popping up incesently..I dont under stand exe vers? sorry semi computer stupid. Please explain that one...thanks

Tony
December 31, 2005 6:24 AM

Guys, My son installed iriver software after I purchased an mp3 player for him. Moodlogic was doing the same thing and driving me nuts! My son since then has gone back to another state, but I installed "Microsoft Antispyware Beta 1" for free and was able to delete updater.exe using the tool they give you. THey have an application agents checkpoint in it that tells you all of the things that are running on your system. Getting Norton 2005 is also a "MUST!"

Muthu
December 31, 2005 8:23 AM

Updater.exe got installed on my computer after I installed iRiver Music Manager as well. I deleted using this approach:

* Bring up the task manager (Cntrl-alt-delete) and in the “Processes” tab, you can see Updater.exe running. Select it and press the “delete” key.

* Then you can delete the c:\updater.exe file without a problem.

From what I observed so far, it hasn’t reinstalled itself or done anything malicious.

tracy pierce
January 5, 2006 8:03 PM

the other file associated with updater.exe from Moodlogic via iRiver is catgen.exe, also in the root directory. I was able to simply clobber each of them.

I dunno, either, about the "excellent rep" of iRiver. I bought their iFP-799 player, which claimed to play .wma files; it didn't so I followed all their bs instructions replacing firmware with same version, and the MusicManager with the same version, no joy. got them on the phone finally and after 1/2 hour jerking me around they told me that Windows Lossless format (a flavor of .wma) "just doesn't work". So I says of course "Why not mention that in the docs, or on the website?". I wouldn't have liked it but it wouldn't have caused me to return the product. But the deception did, F*** iRiver.

umesh
February 7, 2006 9:07 PM

hi
i install Symantec antivirus to my pc ofter instal SAV i try to update latest patch ofter 70% uptation it is giving error Application Error
UPDATER Caused a Genera protection Fault in module UPDATER.EXE at 0001:ACF4
Choose close .UPDATER will colse

So pls give me solution pls

Tammy
October 4, 2006 6:56 PM

I just got this "updater.exe" box with Norton asking if i would allow or deny it's access. I don't have the iriver everyone is talking about. But is it a coincidence that today right before it 2 things happened: 1) I downloaded a upromise thing called "remindu" ? 2) A storm knocked out my power twice for a few seconds ?

some guy
December 28, 2007 6:54 AM

Interesting link about CATGEN.EXE. It is classified as spyware.

http://spywarefiles.prevx.com/RRHFEB46753/CATGEN.EXE.html

Thanks all for the info about update.exe, I've been living with that tumor for a year.

If you have an iRiver, it is possible to upgrade your firmware so it appears as a USB drive, and you can uninstall the whole iRiver application forever.

geneva samples
October 30, 2008 9:06 AM

my pc always says it cant find the updater exe
whats that about

Dwight
May 13, 2010 7:47 AM

I am running windows 7. I get a windows warning asking me if i want to install updater.exe. I say no and it goes away for an hour and then reopens asking if I want to open. Is this a real file I need to open? If not how do i get it to go away permanently. I have run malware bytes and AVAST and neither finds anything

Comments on this entry are closed.

If you have a question, start by using the search box up at the top of the page - there's a very good chance that your question has already been answered on Ask Leo!.

If you don't find your answer, head out to http://askleo.com/ask to ask your question.