XPost: alt.comp.freeware

"Jan K." <janicekoziol@nie.ma.spamu.prosze.com> wrote

| The first hit for "wextract_cleanup0" is this
| https://www.bleepingcomputer.com/startups/21644/advpack.dll/
| "Program used to cleanup after installing updates and software."
|

Yes. Not a problem. When you see these things you can look in the
system32 folder and check the file properties. In this case there's
not info for advpack but it does say it's a Microsoft file. The DLL
functions are typical setup functions.

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

XPost: alt.comp.freeware

The KC Softwares freeware "Startup Sentinel" usually reports new things after I install poorly behaved software but this time it reported something
different. https://www.kcsoftwares.com/?sus

This is what Startup Sentinel reported after a Windows update.
HKLM:RunOnce wextract_cleanup0 rundll32.exe C:\Windows\system32\advpack.dll,DelNodeRunDLL32 "C:\Windows\TEMP\IXP000.TMP\"

The "advpack" sounds fishy so I looked it up a bit. https://www.google.com/search?q=wextract_cleanup0

The first hit for "wextract_cleanup0" is this https://www.bleepingcomputer.com/startups/21644/advpack.dll/
"Program used to cleanup after installing updates and software."

The first hit for adpack.dll is this. https://answers.microsoft.com/en-us/windows/forum/all/advpackdll/57bd54e9-b9cf-426a-a390-f4c517e84518

Would you let it run or kill it?

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)