Windows Update Service vbe

Riyaz 21 Reputation points
2022-02-06T03:17:49.167+00:00

What is this windows update service vbe ? Should i delete it or allow on startup ? is it a windows service ?171654-screenshot-2022-02-06-084149.png171579-screenshot-2022-02-06-084111.png

PATH:

C:\Users\Riyaz\AppData\Roaming\Windows Updates Files\Windows Updates Service.vbe

It is also on startup programs o task manager . i scanned it with MSRT no virus found. i searched it online many users have this issue and some says its a virus and it keeps coming back after 3-4 days. should i be worried. help me.

see pics for more details ...

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
7,453 questions
Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,041 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,324 questions
0 comments No comments
{count} votes

Accepted answer
  1. Dave Patrick 351.7K Reputation points MVP
    2022-02-06T03:54:06.57+00:00

    It is a VBScript file that can be viewed with notepad.exe. You can rename it with a TXT extension then it can no longer be executed. Looks to be a coin miner malware.

    --please don't forget to upvote and Accept as answer if the reply is helpful--


2 additional answers

Sort by: Oldest
  1. MatiX412 1 Reputation point
    2022-02-06T14:32:04.623+00:00

    It's a crypto minner, it comes from Step 3 - Setup_Install_Game.exe. You should delete it.

    0 comments No comments

  2. Fahad Mansoor 1 Reputation point
    2022-06-18T07:14:31.777+00:00

    I noted that after activation of this virus it change into:
    Startup Name: "windows"
    Command line: ""C:\Users\Fahad\AppData\Roaming\Windows"Updates Files\windows update service.vbe" (don't ignore dubbel ")
    and here open file location is disabled
    well i remove it by using malwarebyte trail but my 23 registries are damaged