wucrtupd.exe: the Windows Critical Update Notification utility

What wucrtupd.exe does

This program notified you when security-related updates had been released. The old page called it an excellent way to keep your system secure. It belongs to the Critical Update Notification utility that Microsoft shipped with Windows Update in the Windows 98 era: a background process that checked the Windows Update site on a regular basis and told you about critical updates.

The old page lists three locations: C:\WINDOWS\SYSTEM\ on Windows 98/ME, C:\WINNT\SYSTEM32 on Windows NT/2000, and C:\WINDOWS\SYSTEM32 on Windows XP. These systems are history. Windows Update in Windows 10 and 11 does this job without this file, and Windows 7, Vista and XP no longer receive updates, so the notices of the old tool no longer lead anywhere.

About .exe files. An .exe file is a program. It runs as a process you can see in Task Manager, so its name, folder and publisher are what to check.

How to check it

On a modern PC the question is why the file is there at all.

1. Look at the folder. Open Task Manager (Ctrl+Shift+Esc), find wucrtupd.exe on the Details tab, right-click it and choose Open file location. A copy in C:\Windows\System32 on an old PC matches the old page. A copy in a user profile, a Temp or AppData folder does not.
2. Check the digital signature. Right-click the file, choose Properties, then Digital Signatures. A genuine Microsoft file carries Microsoft's signature. Files from the Windows 98 era may have no signature at all, so an unsigned file on Windows 10 or 11 is a reason to scan.

   Get-AuthenticodeSignature "C:\Windows\System32\wucrtupd.exe" | Format-List Status, SignerCertificate

3. Look at the startup list. Open Task Manager > Startup apps and look for a Critical Update entry. The old tool started with Windows through a Run entry.
4. Scan the PC. Run a full scan and an offline scan with Microsoft Defender (Windows Security > Virus & threat protection > Scan options).

The folder and signature show whether the file is a leftover of an old Windows. They do not prove the rest of the PC is clean, so scan as well.

Do you need wucrtupd.exe?

No. Windows 10 and 11 get updates through Windows Update, which does not use this file. On an old PC, the notifier was only a convenience.

1. Check that it is the old utility. Use the checks above: the file sits in the system folder of the old Windows version and has no suspicious behaviour.
2. Stop it starting. Open Task Manager > Startup apps and disable a Critical Update entry, if there is one.
3. Use Windows Update instead. Open Settings > Windows Update and install updates there, so that security updates are not missed.
4. If the file is somewhere else. If the file is in a user or Temp folder, or runs on a modern PC for no reason, run a full scan and an offline scan with Microsoft Defender and let it remove the threat.

Warning signs

Questions people ask