Threat Description

Spyware: ​W32/WindUpdates


Category: Spyware
Type: Spyware
Platform: W32
Aliases: Media Gateway, Media Pass, WinAd, Media Access


A program which negatively affect's a user's control of their computer system or their browsing experience, usually without the user's consent or knowledge.


Automatic action

Once detected, the F-Secure security product will automatically quarantine the suspect file and prompt the user to select a further desired action.

Quarantine is a safe repository for files that may be harmful. A quarantined file can be restored or, if you decide so, deleted.

Excluding a file from scanning

If you are aware of and accept any potential risk associated with this program, you can configure the F-Secure security product to exclude it from scanning.

Suspect a False Alarm?

If you suspect a file has been incorrectly identified as malicious, (that is, it is a False Alarm or a False Positive), please first ensure your F-Secure security program is up-to-date with the latest detection database updates, then rescan the suspect file.

If you continue to suspect a False Alarm, you may submit a sample of the suspect file to our Security Labs for further analysis via the Submit A Sample (SAS) page.

More scanning & removal options

More information on scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

Spyware:W32/WindUpdates displays advertisements, customized based on the surfing habits of the user. It may also install other software, unknown to the user, according to the End User License Agreement (EULA). Such behaviour is rated as a high security risk.

WindUpdates is created by 180solutions and can silently function as spyware, even though it is not branded as such.

It is distributed via ActiveX installations while visiting 3rd party websites, and bundled as an ad-support with 3rd party software. Some rumors also claim it is distributed by exploiting security flaws. It may be distributed using a large variety of names, to prevent users from accurately identifying it.

Spying Notification

The EULA states that without limitations, 180solutions is allowed to install new features in its current applications, or to install a new application without the user's knowledge or consent. WindUpdates Arbitrary data is also communicated to 180solutions servers. This information is hidden deep in the EULA, so that the average user would not find this clause.&

From the WindUpdates homepage, it appears that the software has no purpose other than delivering pop-up advertisements.

For more details about 180solutions, read the descriptionhere.

Description Created: 2006-01-01 10:06:30.0

Description Last Modified: 2009-08-11 04:58:05.0


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More