Author Topic: AvastEmUpdate.exe  (Read 4992 times)

Offline colwarg

  • Jr. Member
  • **
  • Posts: 47
    • Personal Message (Offline)
AvastEmUpdate.exe
« on: August 17, 2012, 01:28:17 AM »
Code: [Select]
The instruction at "0x77fa2f0c" referenced memory at "0x00000000". The memory could not be "written".
Click on OK to terminate the program
Click on CANCEL to debug the program

So, seeing as it's:
A) buggy
B) launched by some hidden setting as a scheduled task
C) leaves traces of it running
Code: [Select]
"avast! Emergency Update.job" (AvastEmUpdate.exe)
Started 8/16/2012 9:14:00 AM
"avast! Emergency Update.job" (AvastEmUpdate.exe)
Finished 8/16/2012 7:08:22 PM
Result: The task completed with an exit code of (0).

Can it be disabled?

Offline Spec8472

  • avast! team
  • Jr. Member
  • *
  • Posts: 40
    • Personal Message (Offline)
Re: AvastEmUpdate.exe
« Reply #1 on: August 17, 2012, 06:28:04 AM »
Hi, can you specify Windows OS you are using? Also, are you blocking AvastEmUpdate.exe by any 3rd party security solution? The address of exception is in system DLL. You can remove sheduled task item in task scheduler if you need to.

Offline colwarg

  • Jr. Member
  • **
  • Posts: 47
    • Personal Message (Offline)
Re: AvastEmUpdate.exe
« Reply #2 on: August 20, 2012, 05:57:44 AM »
Windows 2000
Sunbelt Firewall
There is no entries in my scheduled tasks for anything other then my overnight defrag jobs.

If the exception is from a system DLL, then it's due to the fact that the firewall is going to block the unknown until I permit it.

If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?

Online Tech

  • avast! team
  • Certainly Bot
  • *
  • Posts: 64881
  • Gender: Male
    • Personal Message (Online)
Re: AvastEmUpdate.exe
« Reply #3 on: August 20, 2012, 12:04:12 PM »
If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?
Good point. Hope the programmers imagine a solution...
The best things in life are free.

Offline Spec8472

  • avast! team
  • Jr. Member
  • *
  • Posts: 40
    • Personal Message (Offline)
Re: AvastEmUpdate.exe
« Reply #4 on: August 21, 2012, 06:49:08 AM »
Hi,

thx for info.

You can also run "AvastEmUpdate.exe /unreg" for task unregistration. Yes exception is in ntdll.dll function RtlCaptureStackBackTrace. I am able to simulate problem now, so it will be fixed in next version.

Windows 2000
Sunbelt Firewall
There is no entries in my scheduled tasks for anything other then my overnight defrag jobs.

If the exception is from a system DLL, then it's due to the fact that the firewall is going to block the unknown until I permit it.

If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?

Offline colwarg

  • Jr. Member
  • **
  • Posts: 47
    • Personal Message (Offline)
Re: AvastEmUpdate.exe
« Reply #5 on: August 21, 2012, 09:23:36 PM »
I can delete that image now?  ???

Offline Skakara

  • Jr. Member
  • **
  • Posts: 33
    • Personal Message (Offline)
Re: AvastEmUpdate.exe
« Reply #6 on: August 22, 2012, 09:51:07 AM »
Here's some FYI's for you from another topic about Avast Emergency Updater (starting from this post and onwards):

You can't 1) delete 2) disable 3) change task settings of the emergency update. It's always reinstated back to how avast wants it to be (after program update). You can stop it by using an "application behavior blocking" software (my Sunbelt Personal Firewall has that) OR you can disable the Windows Task Scheduler (which I will do.. I'm already using a much much better task schduler (+using less memory), nnCron Lite (it has "missed tasks" feature, which Windows XP doesn't have)).

--------------------------------------------

If you're wondering why you're not seeing the "avast! Emergency Update" task in "Scheduled Tasks" folder, when some users report that they see it. It's a hidden task and some users might have a registry key (put by some other software) that makes it visible even if it's hidden. Notice that setting "show hidden files and folders" from explorer "folder options -> view" does NOT show hidden task files! Here's the registry key if you like to see hidden tasks in Scheduled Tasks folder (reboot needed):

Code: [Select]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent]
"ViewHiddenTasks"=dword:00000001
Desktop: Windows XP SP3. Has been running from at least avast 4 version. Customized settings. Shields installed & on: Network, Script & Behavior. Shield installed & off: File (has been too buggy and slow to turn on on this machine, started from the first 5.x version, similar settings in 4.x worked just fine). On-demand scans used for new files (+VirusTotal online scanner for files from unknown/shady sources), and saved custom full scan every month.. no malware.. if one knows what to do, it's possible to run a PC without "full" AV protection for better performance.

Laptop: Windows XP SP3. Clean new installation of avast 7 -> upgraded to 8. No settings changed. Shields installed & on: File, Network, Script & Behavior.

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now