Some additional info:
The dll is for the Microsoft Update Installation Engine and is located in
folder C:\Windows\Downloaded Program Files. It is an ActiveX component that
checks for Office Updates. It is possible that the version you have is
either out-of-date or may have been substitued with a bogus dll. The latest
version should be supplied by Microsoft and have a version number of
12.0.3208.1003 and dated 9.1.2005. I can not determine why Windows Defender
is alerting you because I have the active X dll installed on my system and WD
gives me no alerts.
To answer your more general question of how can you tell, it is sometimes
not easy. You may have to look at a clean system and compare module size,
date, etc. or go to an ati-spyware forum and see what others have posted.