At about 4pm today we had a large number of machines in our environment launch AutoupdateSVC.exe and start downloading updates directly from Microsoft. Has anyone seen this happen in their environment? I'm not sure if this was kicked off by shavlik or something else, but i figured i'd ask if anyone recently had this happen to them. THe result was a crushing of our internet rendering all users useless for 2 hours until we could manually get to each machine and kill this AutoUpdateSvc Process.
Shavlik uses only Windows Update for patching. We do not place any files, other than patches, on target systems. It appears Autoupdatesrv.exe is part of the 3Connect program for autoupdating. We do not patch this product, so the process isn't from one of our patches we deployed.
The 3Connect program is made by Birdstep technology and is used for some types of modems/mobile routers.