Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: ky331 on November 23, 2013, 02:21:37 PM

Title: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 02:21:37 PM
This morning (23 Nov.), WinPatrol alerted me that avast had placed an emergency update in my startup, to be run upon reboot.

Emergency Update 20131121 (presumably the date, 2013-11-21) ,
filename:  4749EAC5-AD58-436B-8F6C-CB01BA377D62.EXE
[EDIT:  It seems the executable filename is random/different for every person.]

At first, I thought/expected this was a RUN-ONCE, to fix something... but after rebooting (and presumably having run), I see it remains in my startup list to be run EVERY time I reboot.

1) Can someone enlighten us as to the nature (reason) for this emergency update?   What did it address/fix?
2) Why is this fix running every time I reboot, rather than just doing the job once?

System info:  Avast 8 on Win7x64 Pro SP1
Title: Re: Emergency Update 2013-11-21?
Post by: iroc9555 on November 23, 2013, 02:59:17 PM
At first, I thought/expected this was a RUN-ONCE, to fix something... but after rebooting (and presumably having run), I see it remains in my startup list to be run EVERY time I reboot.

1) Can someone enlighten us as to the nature (reason) for this emergency update?   What did it address/fix?
2) Why is this fix running every time I reboot, rather than just doing the job once?

I am also curious to know.
Title: Re: Emergency Update 2013-11-21?
Post by: BearPup on November 23, 2013, 03:11:12 PM
Please add me to this growing list of people with questions regarding this "Emergency Update". I rarely reboot my computer - generally only when software requires me to do so.

1. So, for how many reboots does this need to be run?
2. Do I back this up as part of my weekly backup, or exclude it as its only temporary?

Assistance is appreciated.
Regards,
BearPup
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on November 23, 2013, 03:19:39 PM
but after rebooting (and presumably having run), I see it remains in my startup list to be run EVERY time I reboot.

Same here.

System Info:
Win XP Pro SP3
Avast! Free AV 9.0.2008
Online Armor Free 7.0.0.1866 (Web Shield - off)
*Avast!/OA mutually excluded
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 23, 2013, 03:48:09 PM
idem...now I have just reboot again my PC and the same case :o
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 23, 2013, 04:03:22 PM
I think it is a bug of avast... I'm back to restart the pc is run again (like this in normal home..) update in the Task Manager, but the patch already applied this and exclusions work... disable self-defense of avast, remove the executable from the folder empupdate and then with ccleaner it delete the entry into home...reboot and everything is ok..
Title: Re: Emergency Update 2013-11-21?
Post by: Ѕeeкɘя on November 23, 2013, 07:09:25 PM
I just deleted the startup entry assuming that it dates back to November 21 and being modified on 23rd, it did its work by now. If it didn't, then it would create again maybe (the actual .exe wasn't deleted). There is no reason an emupdate should stay on startup entry for that long even after several reboots. No problems so far.
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on November 23, 2013, 07:26:42 PM
I just deleted the startup entry assuming that it dates back to November 21 and being modified on 23rd, it did its work by now. If it didn't, then it would create again maybe (the actual .exe wasn't deleted). There is no reason an emupdate should stay on startup entry for that long even after several reboots. No problems so far.

I did the same, but before deleting the executable (Avast\setup\emupdate), I manually launched it - just to be sure...
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on November 23, 2013, 07:35:32 PM
Well this doesn't look like it is a run once affair but a regular startup entry now. Given that it has the /check parameter after the path in the startup command.

So I don't think this is something that you should remove, I don't know if subsequent running of the hidden scheduled task for AvastEmUpdate.exe would replace it.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 07:45:01 PM
I'm assuming that, since instituted as a RUN (as opposed to a RUN ONCE), this is what avast intended --- for whatever reasons yet unbeknownst to us.   As such, I have kept the startup entry intact.   I have rebooted two or three times since, with no obvious/overt problems, so it seems repeatedly running this process is not causing me any harm.

Hopefully, someone high "in-the-know" will eventually reply, telling us WHAT this update is doing, and whether its continual running on each reboot is required or not.   Ideally, avast can issue another RUN-ONCE update to remove this, if that's deemed the appropriate course of action.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 07:47:25 PM
DavidR,

Can you explain the meaning and purpose of the /CHECK parameter?
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on November 23, 2013, 07:49:41 PM
My assumption is/was that when run, it checks for the presence of an emergency update.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 08:09:04 PM
DavidR replied:  "My assumption is/was that when run, it checks for the presence of an emergency update".

Since Avast already has an "Avast! Emergency Update" task that runs at every log-on as part of Task Scheduler --- presumably checking (online) for the existence of an emergency update, and if found, either running it immediately, or setting-it-up to run [once] on the next reboot --- why would it (suddenly now) need a separate startup entry to check for the presence of an emergency update?
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 23, 2013, 08:26:48 PM
I eliminated it of start (turn off self-defense in avast) after verifying that it was executed in every reboot again and that the patch fulfilled his fucion in exclusions of the web shield..deleted also .exe of folder empupdate..all ok...
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 09:31:14 PM
Another thing that's in need of explanation:   While I believe we're all talking about the same "emergency update", 20131121, it seems that it's being given a separate (random) EXEcutable filename on each person's system.   That is typically a sign of malware.

On the other hand, the file IS digitally signed by avast, so it should be legitimate.
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on November 23, 2013, 09:48:24 PM
it seems that it's being given a separate (random) EXEcutable filename on each person's system. 

Avast emergency updates have always worked this way: random filenames (letters and numbers).
When they were first introduced, the download folder for the executable files was C:\WINDOWS\Temp  - which was a very bad idea, by the way.  At least recently they have changed the download folder.
Title: Re: Emergency Update 2013-11-21?
Post by: mwsoft on November 23, 2013, 10:01:19 PM
The emergency update I got does not seem to be the same one talked about in all these posts? I got: C:\Program Files\AVAST Software\Avast\setup\emupdate\45283732-120d-471e-8cdd-23f54d298924.exe /check

Is it the same as earlier, or a revised "emergency update?" I worry about running it so am deleting it w/o doing so. I figure if its "for real" that avast! will post here and tell us, or, failing that, watever it does that is good will appear in the next update to the program? This seems logical, I hope? :)
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 10:09:02 PM
mwsoft,
that's the "random" nature of the executable filename we've just been discussing.   It seems that people who have WinPatrol will see this "emergency update" indicated/titled as 20131121 --- presumably representing the date it was first "created" --- but most people here only received the update today (20131123).   As such, it's likely your update is precisely what we're considering in this thread.
Title: Re: Emergency Update 2013-11-21?
Post by: joe53 on November 23, 2013, 10:28:43 PM
 After using (and recommending)  avast for many years with very few problems, I'm finally forced to register with this forum, and weigh in on this topic.

It concerns me when some randomly labelled alphanumeric executable inserts itself into my auto-startup. I disabled it via WinPatrol as soon as I saw it. After rebooting, no problems.

@avast! As Ricky Ricardo used to say to Lucy, "you got some 'splaining to do!"

Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 23, 2013, 10:34:29 PM
SUPERAntiSpyware is detecting Avast emupdate registry key as Trojan.Agent/Gen.

 Trojan.Agent/Gen
   HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121
Title: Re: Emergency Update 2013-11-21?
Post by: BearPup on November 23, 2013, 10:39:10 PM
@Joe53. I totally agree with you, it is for a similar arrogance on avasts' part that got me to register here recently. So far, no explanations, no apologies, no concern. It makes me consider a new program!

Avast, are you listening?
Title: Re: Emergency Update 2013-11-21?
Post by: ram1220 on November 23, 2013, 11:13:00 PM
 I haven't rebooted my computer (Win 7) in days. But I did run an msconfig earlier today for another reason and I found the emupdate checked in my startup items. I unchecked it and am waiting to hear a response from Avast also. With all the release problems with 2014 and Avast's lack of response on that I am worried about this latest "glitch". If it is fact a form of malware I will uninstall Avast and use something else. I also will never put it on another computer I build or repair.
Title: Re: Emergency Update 2013-11-21?
Post by: reisender on November 23, 2013, 11:28:28 PM
Hello,

I think, Avast has problems with his own self protection. Entries in the registry group "HKLM:Run" can not be delete if the self protection is active.
The same problem with CCleaner.

Greetings
Christian
Title: Re: Emergency Update 2013-11-21?
Post by: Vlk on November 23, 2013, 11:43:48 PM
Hi guys,

Yes these are as expected (i.e. no malware). I agree that the random filename is far from ideal (from the mere suspicousness point of view), but this is how it was originally designed.

While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Thanks
Vlk
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 23, 2013, 11:53:04 PM
Vlk,

Now that you're here in this thread, can you enlighten us, specifically:

1) What is the precise purpose/function of today's "update" 2013-11-21 ?
2) Is it really intended to run EVERY time the PC is booted up (or users take-turns logging-on to their accounts)?   [Meaning we should leave it in our startup routine] ---
or was it intended to run only once, in which case we can safely remove it from our startup?

If it's supposed to run every boot:   then for those who accidentally or intentionally removed it, will the "Emergency Update" TASK, in Task Scheduler, reinstate this startup?

Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 23, 2013, 11:54:14 PM
Hi guys,

Yes these are as expected (i.e. no malware). I agree that the random filename is far from ideal (from the mere suspicousness point of view), but this is how it was originally designed.

While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Thanks
Vlk
greetings, that we already know it but the problem is because it remains in start of windows and does not disappear like in other occasions..thanks
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 24, 2013, 12:00:20 AM
..While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

If the purpose was to patch the program binaries as you say, then I don't understand why:-
(a) it is required to run more than once
(b) there has been no corresponding change in the program download (there should have also been a corrresponding minor version update in the program.
(c) If the patch is so urgent it can't wait for an actual program update, then the present emergency update would not appear to be a reliable method since it relies on the users PC being rebooted, and that can be very infrequent in some cases.

Title: Re: Emergency Update 2013-11-21?
Post by: mustang64 on November 24, 2013, 12:08:00 AM
Hey VLK,
How about letting us know if we can remove this thing from our startup??

Those of us with Winpatrol can do that very easily, and there are other ways as well.

Give us a little info here not just a quick hi guys and take off!!

Thanks.
LDS
Title: Re: Emergency Update 2013-11-21?
Post by: bikemanAMD on November 24, 2013, 01:21:11 AM
Yes i'd like to know the purpose of todays emergency update as well, Will it auto remove from startup when it's done?  Can we set it to not start?  It is designed to start on every bootup of PC's?   

Would like either a post with info why it was sent out today, what It fixed?  would be very helpful

Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 24, 2013, 01:51:49 AM
I think, Avast has problems with his own self protection. Entries in the registry group "HKLM:Run" can not be delete if the self protection is active.
The same problem with CCleaner.

Christian,
Interesting you should mention that. I run with avast's self defense module disabled (primarily because of the issue with CCleaner), and having just checked the "HKLM:Run" entries the one for the "emergency update" is not present, although the "random character.exe" file in question is still in the emupdate file. 

Edit
This particular HKLM:Run entry is NOT present after a clean installation of Avast 2014, nor is the file in emupdate, confirming that the standard installation doesn't run the check on bootup.  Question I have is "was my emergency update HKLM:Run entry placed there as it should have been, done the job it was meant to do and then disappeared into the who knows where, or did something malfunction and not put it there in the first place, and thus the job it was meant to do actually hasn't been done?
If any of the standard binaries get changed/updated/patched after installation, there should be an indication somewhere that the installation is no longer the version it was previously.
Title: Re: Emergency Update 2013-11-21?
Post by: mchain on November 24, 2013, 08:18:55 AM
Hi guys,

Yes these are as expected (i.e. no malware). I agree that the random filename is far from ideal (from the mere suspicousness point of view), but this is how it was originally designed.

While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Thanks
Vlk
Emphasis mine.

Note that no reboot is normally needed when avast! runs emergency updater on your system.  Note also that at least twice already, avast! team has averted a meltdown (disaster) by using this tool.  It also saves time and money for users and avast! by introducing fixes for bugs without having users do a new update of the latest version via using the program update feature normally used to update the program.  Short and sweet.

BTW. Microsoft Security Essentials does not even have a 'self-defense module'.  First I've heard of a conflict between CCleaner and the avast! self-defense module, and the only remedy for that issue is to turn off self-defense in avast!?  Seems that setting change would leave avast! open to being changed from without to the point of even disabling it, just as MSE has been known to do when attacked.   ???   (Now you've got no antivirus program and no active protection.)

OK, then.
Title: Re: Emergency Update 2013-11-21?
Post by: reisender on November 24, 2013, 09:04:37 AM
Hello,

if I try to open HKLM:Run with Avast Self Defence on I get an Error (see Screenshot). Without Self Defence it works and I have two Avast entries.

Greetings
Christian

Edit: After restart without Self Defence the Emergency entry remains.
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 24, 2013, 09:17:11 AM
I cannot exclude HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121 key from
SUPERAntiSpyware scan.As I said before it is detected as Trojan.Agent/Gen.Also I can't report it as FP because
button is greyed out,maybe because I have free version.
I am not happy with latest Avast things (emupdate, VPN Pop-up instead of vps update).
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 24, 2013, 09:40:59 AM
This is a bug in avast emergency update.a patch should not be run on each reboot.delete entry of start by disabling the defense of avast and delete the .exe and no problem.We hope an explanation of avast team .
reboot my pc 2 or 3 times and not emergency update in start menu.. :)
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 24, 2013, 10:20:17 AM
Also,RogueKiller detects it as Rogue ST.

  http://forum.avast.com/index.php?topic=140786.0

For the love of God,someone from Avast Team give us some answers.
Title: Re: Emergency Update 2013-11-21?
Post by: been on November 24, 2013, 10:28:08 AM
I think people may be getting a little hot under the collar. Emergency updates are a good thing and if the most recent one is unnecessarily re-patching at subsequent start ups then that may be a bit sloppy but it doesn't appear to be breaking anything. Better, surely, to leave it be for the time being than to disable Avast's self-protection to remove files which none of us know what they do.
Title: What if you already let SAS remove it?
Post by: Efdy on November 24, 2013, 10:38:08 AM
Average desktop user here. I have Avast Free Antivirus. I already let SUPERAntiSpyware remove this after a routine scan tonight. It seems gone. I am not really very good with computers, or using the registry. I ran SAS again after the reboot and it did not detect this again. I do not know what all this patch-repatch stuff means either. Do I need to reinstall Avast to get this back in there or anything like that? Is my system at risk after SAS removed this? Thank you.
Title: Re: Emergency Update 2013-11-21?
Post by: been on November 24, 2013, 10:44:09 AM
Vlk has acknowledged that the patch is a genuine Avast file and, as it's pretty unthinkable that Avast would push malware at us, I'm sure it's safe to assume that alerts from SuperAntispyware etc are false positives.
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 24, 2013, 01:15:00 PM
.. It also saves time and money for users and avast! by introducing fixes for bugs without having users do a new update of the latest version via using the program update feature normally used to update the program.  Short and sweet.

So when a user is advised here on the forum to uninstall, cleanup and then reinstall Avast to cure one or other problem, (and a check will show that advice is given rather frequently), what happens to the fixes for bugs that were applied to the original installation by the emergency updates. Have they been added into the new installation, (in which case why doesn't the current download not have a different version number), is the emergency update being broadcast all the time until a new program version is released, or is the new install simply disadvantaged?

Quote
First I've heard of a conflict between CCleaner and the avast! self-defense module, and the only remedy for that issue is to turn off self-defense in avast!?
That problem has been known for some time, and confirmed by a number of users. Yes, the only solution at the moment until Avast get around to correcting the issue (which is their self defence protection acting outside of the area it should be, and impinging on a respected 3rd party product) is to either not use one of the features of CCleaner, or turn off the Avast Self Protection.  Since I use the feature in CCleaner, my choice is to turn off the offending Avast module - others can decide for themselves.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 24, 2013, 02:48:46 PM
"Note also that at least twice already, avast! team has averted a meltdown (disaster) by using this tool".  ABSOLUTELY!   Two-thumbs up on this!!

"I think people may be getting a little hot under the collar...."

I started this post (two pages ago) with two simple, direct questions --- which have yet to be answered:
1) Can someone enlighten us as to the nature (reason) for this emergency update?   What did it address/fix?
2) Why is this fix running every time I reboot, rather than just doing the job once?


Had we gotten an equally direct response from someone "in the know" (like Vlk), there may have been no need for subsequent debates/rants.

If, for security reasons, avast can't publicize the specific "nature"/reason for this update, a simple statement to that effect would suffice.

But we still need/deserve an answer to the question:   Should we continue to let this update run, again and again, on all system startups?   Or should we remove its startup entry, after it has run (at least once)?

And if it's supposed to run every boot:   then for those who accidentally or intentionally removed it, will the "Emergency Update" TASK, in Task Scheduler, reinstate this startup?

Direct answers to these simple questions should take care of everyone's concerns.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 24, 2013, 03:08:38 PM
"Note also that at least twice already, avast! team has averted a meltdown (disaster) by using this tool".  ABSOLUTELY!   Two-thumbs up on this!!

"I think people may be getting a little hot under the collar...."

I started this post (two pages ago) with two simple, direct questions --- which have yet to be answered:
1) Can someone enlighten us as to the nature (reason) for this emergency update?   What did it address/fix?
2) Why is this fix running every time I reboot, rather than just doing the job once?


Had we gotten an equally direct response from someone "in the know" (like Vlk), there may have been no need for subsequent debates/rants.

If, for security reasons, avast can't publicize the specific "nature"/reason for this update, a simple statement to that effect would suffice.

But we still need/deserve an answer to the question:   Should we continue to let this update run, again and again, on all system startups?   Or should we remove its startup entry, after it has run (at least once)?

And if it's supposed to run every boot:   then for those who accidentally or intentionally removed it, will the "Emergency Update" TASK, in Task Scheduler, reinstate this startup?

Direct answers to these simple questions should take care of everyone's concerns.

It has nothing to do the scheduled task of avast emergency update that runs every 12 hours with the entry into the Windows startup .... delete the entry from the startup does not prevent or modify that continue to work the scheduled task every 12 hours and if he had another emergency update was installed
Title: Re: Emergency Update 2013-11-21?
Post by: sammi 1820 on November 24, 2013, 04:08:40 PM
Quote from Ky331:...But we still need/deserve an answer to the question:   Should we continue to let this update run, again and again, on all system startups?   Or should we remove its startup entry, after it has run (at least once)?

And if it's supposed to run every boot:   then for those who accidentally or intentionally removed it, will the "Emergency Update" TASK, in Task Scheduler, reinstate this startup?

Direct answers to these simple questions should take care of everyone's concerns.

I concur whole heartedly and in total agreement with this statement!!!  WHEN will we get/be given the conclusive answer to these questions.... >:(
Title: Re: Emergency Update 2013-11-21?
Post by: thekochs on November 24, 2013, 04:12:24 PM
It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Wow,

I am an IT guy and have Avast Free on several of my home PCs and we license Avast on our business PCs.....all on V8.
I am also a Moderator on many other A/V forums and recommend Avast to tons & tons of people....on web and personal.
I've been monitoring the V9 threads and I'm shocked by this......but it rings very familiar.
Prior to Avast I was a HUGE AVG proponent......right up until they did the same thing and literally bricked thousands of PCs with a new "update".  The key seems to be the A/V companies want to reach out from what they are good on to things they are not to become a one-stop shop.  Prior to AVG was Symantec (which is a total PIG) that defined A/V (Norton) in the day and now I would not use if they paid me to.  The above statement not only does not give me a the warn-n-fuzzies that I think it was intended but scares me to not sleep at night.

I HAVE NOT given up on Avast but after reading what V9 was trying to do.....clearly a full re-write/architecture.....I am holding off for 6+months to upgrade.....and not recommending this to all others.....because it is frankly not worth the risk.  The code has too many glitches and there are too many excuses and posts from "non-Avast Team" on speculation not facts.  I also find the lack of documentation troubling as well.  It all adds up that V9 was not ready for prime-time and the "community" is doing the "bug discovery".  New programs always have bugs but A/V re-writes should be much more solid than this.

I will keep monitoring the progress and I am still a fan of Avast and not giving up.....just not jumping into the deep end of the pool with V9.

Last comment: Since this is a MAJOR update in V9.....it would seem that Avast would assign a tech apps to the Forum thread.  The Moderators and Super Posters do a great job but there is WAY too much speculation going on and I think it is in Avast's & clearly the communities best interest to have a Avast Team Apps engineer on the dialogues as well.  Just my two cents. 
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 24, 2013, 04:18:52 PM
OK,I disabled Avast self-protection module (translation from Croatian) and deleted Avast emupdate from
Windows start up with CCleaner's Start up manager.
Rebooted and received normal 131124-0 VPS update with sound.
  http://forum.avast.com/index.php?topic=140783.0
Also,after reboot there is no Avast emupdate in Windows start up anymore.
Since reg key doesn't exist anymore,SUPERAntiSpyware doesn't detect it anymore.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 24, 2013, 04:21:32 PM
OK,I disabled Avast self-protection module (translation from Croatian) and deleted Avast emupdate from
Windows start up with CCleaner's Start up manager.
Rebooted and received normal 131124-0 VPS update with sound.
  http://forum.avast.com/index.php?topic=140783.0
Also,after reboot there is no Avast emupdate in Windows start up anymore.
Since reg key doesn't exist anymore,SUPERAntiSpyware doesn't detect it anymore.

idem.. ;)
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on November 24, 2013, 05:27:23 PM
<snip>
Last comment: Since this is a MAJOR update in V9.....it would seem that Avast would assign a tech apps to the Forum thread.  The Moderators and Super Posters do a great job but there is WAY too much speculation going on and I think it is in Avast's & clearly the communities best interest to have a Avast Team Apps engineer on the dialogues as well.  Just my two cents. 

Those flagged as Moderators are avast employees, check the information on the left of posts, if they are avast! team that is another indication of who are part of Avast Software.
Title: Re: Emergency Update 2013-11-21?
Post by: schmidthouse on November 24, 2013, 06:26:54 PM
It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Wow,

I am an IT guy and have Avast Free on several of my home PCs and we license Avast on our business PCs.....all on V8.
I am also a Moderator on many other A/V forums and recommend Avast to tons & tons of people....on web and personal.
I've been monitoring the V9 threads and I'm shocked by this......but it rings very familiar.
Prior to Avast I was a HUGE AVG proponent......right up until they did the same thing and literally bricked thousands of PCs with a new "update".  The key seems to be the A/V companies want to reach out from what they are good on to things they are not to become a one-stop shop.  Prior to AVG was Symantec (which is a total PIG) that defined A/V (Norton) in the day and now I would not use if they paid me to.  The above statement not only does not give me a the warn-n-fuzzies that I think it was intended but scares me to not sleep at night.

I HAVE NOT given up on Avast but after reading what V9 was trying to do.....clearly a full re-write/architecture.....I am holding off for 6+months to upgrade.....and not recommending this to all others.....because it is frankly not worth the risk.  The code has too many glitches and there are too many excuses and posts from "non-Avast Team" on speculation not facts.  I also find the lack of documentation troubling as well.  It all adds up that V9 was not ready for prime-time and the "community" is doing the "bug discovery".  New programs always have bugs but A/V re-writes should be much more solid than this.

I will keep monitoring the progress and I am still a fan of Avast and not giving up.....just not jumping into the deep end of the pool with V9.

Last comment: Since this is a MAJOR update in V9.....it would seem that Avast would assign a tech apps to the Forum thread.  The Moderators and Super Posters do a great job but there is WAY too much speculation going on and I think it is in Avast's & clearly the communities best interest to have a Avast Team Apps engineer on the dialogues as well.  Just my two cents.

I spend much time reading through the Threads and gleaning interesting facts and Fiction.
Speculation, yes I think there are unresolved questions that very few know the answers too.
 I also find that unsettling. ???
Title: Re: Emergency Update 2013-11-21?
Post by: thekochs on November 24, 2013, 06:28:55 PM
<snip>
Last comment: Since this is a MAJOR update in V9.....it would seem that Avast would assign a tech apps to the Forum thread.  The Moderators and Super Posters do a great job but there is WAY too much speculation going on and I think it is in Avast's & clearly the communities best interest to have a Avast Team Apps engineer on the dialogues as well.  Just my two cents. 

Those flagged as Moderators are avast employees, check the information on the left of posts, if they are avast! team that is another indication of who are part of Avast Software.

Good to know......thx for the clarification.
Title: Re: Emergency Update 2013-11-21?
Post by: schmidthouse on November 24, 2013, 06:32:33 PM
Just a thought.
When SAS or others flag this file/Reg entry in discussion and the user Removes/quarantines it, is the a detrimental effect.
Would it be replaced with next vps update?
Anyone know??
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 24, 2013, 06:52:33 PM
Just a thought.
When SAS or others flag this file/Reg entry in discussion and the user Removes/quarantines it, is the a detrimental effect.
Would it be replaced with next vps update?
Anyone know??
I removed emupdate from start  up and rebooted.Received normal 131124-0 VPS update with sound,without VPN ad.
I don't have emupdate at start up and SAS doesn't detect it anymore.
So far everything is OK.I believe that reg key (start up item) was a bug.
Title: Re: Emergency Update 2013-11-21?
Post by: henri44 on November 24, 2013, 06:56:02 PM
Hello,

Following this new program when Windows starts (emupdate \ dc2941bb-94e1-4b20-4bfe-1d4dd1b6efbb.exe)
- Desinstalled of Avast itself with the "avastclear" tool
- Cleaning with CCleaner and Wise Registry Cleaner
- Install new Avast
- Automatic update with popup and voice VPS 131124-0

stop and restart computer

first observation:
- No folder "emupdate" C: \ Program Files \ Avast Software \ Avast \ setup \
- So no entry in the start of W7 (msconfig and CCleaner)

to follow...
Title: Re: Emergency Update 2013-11-21?
Post by: schmidthouse on November 24, 2013, 06:57:43 PM
"that reg key (start up item) was a bug"
I can't say we know that for sure, at least I havn't come across any definitive explanation from Avast.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 24, 2013, 07:06:41 PM
So why does this emergency update mechanism try to connect to a google (74.125.225.128) server?
I'm running v8, it's been said to exist since v7, this is the first time I've seen it, thanks to Comodo.

Could this be about what Snowden was talking about?

For my initial query, as to the nature of this issue, and the info I gathered to frame it, (screen captures are available), see topic: http://forum.avast.com/index.php?topic=140818.0
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on November 24, 2013, 07:14:20 PM
So why does this emergency update mechanism try to connect to a google (74.125.225.128) server?
I'm running v8, it's been said to exist since v7, this is the first time I've seen it, thanks to Comodo.

Could this be about what Snowden was talking about?

Good question. Good luck with the reply, I didn't get any "official" one (http://forum.avast.com/index.php?topic=139876.0).
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 24, 2013, 07:19:30 PM
So why does this emergency update mechanism try to connect to a google (74.125.225.128) server?
I'm running v8, it's been said to exist since v7, this is the first time I've seen it, thanks to Comodo.

Could this be about what Snowden was talking about?
I believe it has something to do with VPN ads instead of normal VPS update notifications.
Of course I am just guessing since we didn't see any answers from Avast team members.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on November 24, 2013, 07:22:39 PM
Unless/until we know the PURPOSE/FUNCTION of this emergency update, we'll never be able to say... definitively... whether the repetitive startup key was a "bug", or a FEATURE.   The fact that some people here have removed the startup entry without noticing a detrimental side-effect... while others have repeatedly rebooted/rerun the startup entry likewise without noticing a detrimental side-effect... offers neither proof nor refutation of the validity of their respective action:  There may be a hidden, unanticipated consequence of choosing wrongly here, that will only surface at some point in the future.     

As such, I am again pleading for Vlk to tell us, once and for all --- based on the purpose/function of this emergency update --- whether we should leave or remove the startup entry.   Speculation by users here --- who have not analyzed the binary code --- while perhaps interesting, offers no proof.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 24, 2013, 07:49:34 PM
Unless/until we know the PURPOSE/FUNCTION of this emergency update, we'll never be able to say... definitively... whether the repetitive startup key was a "bug", or a FEATURE.   The fact that some people here have removed the startup entry without noticing a detrimental side-effect... while others have repeatedly rebooted/rerun the startup entry likewise without noticing a detrimental side-effect... offers neither proof nor refutation of the validity of their respective action:  There may be a hidden, unanticipated consequence of choosing wrongly here, that will only surface at some point in the future.     

As such, I am again pleading for Vlk to tell us, once and for all --- based on the purpose/function of this emergency update --- whether we should leave or remove the startup entry.   Speculation by users here --- who have not analyzed the binary code --- while perhaps interesting, offers no proof.

Yes, Or one could simply scrap avast, move on to another program, and instead of promoting it to friends, as avast seems to want, could do quite the opposite!  Just making a point, in light of no real support, or so it would surely seem!

I can be patient, to a point!
Title: Re: Emergency Update 2013-11-21?
Post by: GTX66 on November 24, 2013, 08:00:13 PM
I did not know what it was and I did not notice that it was starting with Windows so I just deleted it? Why can't an emergency update be pushed they same way the rest of them are? I agree with  Ky331 about this. Users should be made aware? I have an account with Avast and they have my email address?
Title: Re: Emergency Update 2013-11-21?
Post by: RejZoR on November 24, 2013, 08:54:15 PM
People is making such panick only because they also use 10 other security programs and they alerted them that something has been added. For other 99% of users, it doesn't even matter. And that's the whole point of Emergency Updates. So they can push small important updates without the need to do a proper full program update.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 24, 2013, 09:05:03 PM
RejZoR, security is serious business for me, so when something new comes up, a wise man takes notice.  It has nothing to do with multiple programs running that monitor, unless of course there is a conflict between them.  Also anyone that puts their full faith in any one particular company, does so at the risk of being used by the money machine, of power, called capitalism.  And yes I'm an American, not that it really matters, just that I know these are not the words of a typical American.
Title: Re: Emergency Update 2013-11-21?
Post by: BearPup on November 24, 2013, 09:41:01 PM
@KY331: This is my third post since I joined you at the beginning of this thread, and we are nowhere nearer the Answer than we were at the beginning. My patience has been exhausted. AVG 2014 is available for free at SharewareOnSale. That is where I'm headed now. Maybe when actual registered Users leave Avast for competitors, things will actually change here. I invite you and others to join me.
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 24, 2013, 10:17:35 PM
...And that's the whole point of Emergency Updates. So they can push small important updates without the need to do a proper full program update.

Nice thought, but it would seem that what ever the small emergency update did, it is not important enough for users downloading and installing a new copy of the program (still at 2014.9.0.2008) to need it, or to get it.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 24, 2013, 10:23:16 PM
If now reinstalled avast will become download again the emergency update because these updates are included in next version. this emergency update corrects a small bug in the web shield
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 24, 2013, 10:42:22 PM
If now reinstalled avast will become download again the emergency update

Can anyone who has uninstalled, cleaned out and reinstalled avast since the emergency update confirm that the emergency update has been applied again?.

Quote
.. this emergency update corrects a small bug in the web shield
where has that been officially published by Avast?
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 24, 2013, 11:23:31 PM
If now reinstalled avast will become download again the emergency update

Can anyone who has uninstalled, cleaned out and reinstalled avast since the emergency update confirm that the emergency update has been applied again?.

Quote
.. this emergency update corrects a small bug in the web shield
where has that been officially published by Avast?


exclusions of web shield were not working appropriately and now if...there can be more corrections...this they are only my assumptions and of some member more.
Title: Re: Emergency Update 2013-11-21?
Post by: mchain on November 25, 2013, 12:26:48 AM
All,

If this emupdate process was something that did not work at all, then I could see the multitude of complaints or suspicions might well be justified, at worst.

But that's not the case here.

What's the at best position?  That avast! actively working on and refining and adjusting emupdate as we speak. 

So, if there anomalies, as in FP detections with other security programs, why does anyone here expect avast! to fix other vendor's FP alerts or notifications?  That's not how it works.  In each case, each vendor is responsible for their detection database, and it is up to them to fix those detection issues when they come up.  Not avast!

I can think of one reason, off the bat, why emupdate has been detected by other vendors:  It is the random filename given to it by avast!; same criteria is also used as when avast! classifies a program as a PUP using the actual name of that program, as well as using other parameters.  It is, in this case, likely is only the file name in this case as this file and process is digitally signed by avast!.  I'm certain other vendors use exactly the same criteria to flag a digitally signed file.  Who wouldn't?

Suspicion and paranoia can cause someone to walk away from a perfectly sound, valid, and legitimate program, and really, unless one is capable of actually analyzing programmer's code, that is all one has, a feeling of suspicion and that something is not right.  That's all one is left with, and a hurried judgement not based on known facts can lead to potential disaster.  Please stop.

Where's the proof! 

Certainly if Vlk or someone else can step in and explain and reassure users that are uncertain and unsure about this, then it would go a long way to assuaging certain fears and doubts here.  But, as in any discussion, such help will only come in if all are reasonable about whatever the discussion is about, and, those with doubts remaining, are willing to listen to the avast! team member, as it were.  Otherwise, it is a waste of time to continue on with this. 

I can assure you that team members are always busy, but do spare a little time now and then to clarify things here when it is needed.  Otherwise, no, they won't.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 25, 2013, 12:55:37 AM
...can lead to potential disaster.  Please stop. ...
Please stop???  Do you not realize the everyone here is speaking of 'their' computer, and security, not avast's.  It's pretty arrogant to tell others what to not be concerned about when it's their livelihood on the line.  You're entitled to your own opinion, and so am I, so "please stop" insisting people shouldn't be concerned with their thousands of dollar computers, and personal data that could amount to money lost.  I showed up here only because then event "was not normal," I've been an avast user for quite some time, and I rarely ever show my face here, because things usually run smoothly, but this is highly irregular, so yes I'm concerned.  My main concern is the Google bit, I hate Google!  Just my opinion!

Oh and no disasters are probable either, you seem to be as much of an alarmist as the others you're speaking too.  For years I used Nortons and not Avast and no disaster ever befell me.  I have no idea what you're talking about!  And I've been doing this stuff for quite some time.  My first computer was a Commodore 64 back when they were first marketed.  Been a computer aficionado every since.
Title: Re: Emergency Update 2013-11-21?
Post by: psikofunkster on November 25, 2013, 12:59:09 AM
It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Wow,

I am an IT guy and have Avast Free on several of my home PCs and we license Avast on our business PCs.....all on V8.
I am also a Moderator on many other A/V forums and recommend Avast to tons & tons of people....on web and personal.
I've been monitoring the V9 threads and I'm shocked by this......but it rings very familiar.
Prior to Avast I was a HUGE AVG proponent......right up until they did the same thing and literally bricked thousands of PCs with a new "update".  The key seems to be the A/V companies want to reach out from what they are good on to things they are not to become a one-stop shop.  Prior to AVG was Symantec (which is a total PIG) that defined A/V (Norton) in the day and now I would not use if they paid me to.  The above statement not only does not give me a the warn-n-fuzzies that I think it was intended but scares me to not sleep at night.

I HAVE NOT given up on Avast but after reading what V9 was trying to do.....clearly a full re-write/architecture.....I am holding off for 6+months to upgrade.....and not recommending this to all others.....because it is frankly not worth the risk.  The code has too many glitches and there are too many excuses and posts from "non-Avast Team" on speculation not facts.  I also find the lack of documentation troubling as well.  It all adds up that V9 was not ready for prime-time and the "community" is doing the "bug discovery".  New programs always have bugs but A/V re-writes should be much more solid than this.

I will keep monitoring the progress and I am still a fan of Avast and not giving up.....just not jumping into the deep end of the pool with V9.

Last comment: Since this is a MAJOR update in V9.....it would seem that Avast would assign a tech apps to the Forum thread.  The Moderators and Super Posters do a great job but there is WAY too much speculation going on and I think it is in Avast's & clearly the communities best interest to have a Avast Team Apps engineer on the dialogues as well.  Just my two cents.

What pisses me off about all this, is that windows explorer crashed a few minutes ago, i started suspecting about anydvd, maybe the new windvd 11 upgrade package.....so i google it......windows explorer crashes sometimes related to malware so i run superantispyware:

Trojan.Agent/Gen
   (x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121

Also my pc is feeling sluggish maybe my personal perception though.


im NOT a fan of Avast anymore in fact i hate it right now. 64 days of sub remaining that's why im still here posting.
Title: Re: Emergency Update 2013-11-21?
Post by: psikofunkster on November 25, 2013, 01:09:51 AM
Vlk has acknowledged that the patch is a genuine Avast file and, as it's pretty unthinkable that Avast would push malware at us, I'm sure it's safe to assume that alerts from SuperAntispyware etc are false positives.

I disagree there have been pretty serious events with avast in the past.
Title: Re: Emergency Update 2013-11-21?
Post by: mchain on November 25, 2013, 01:17:33 AM
...can lead to potential disaster.  Please stop. ...
Please stop???  Do you not realize the everyone here is speaking of 'their' computer, and security, not avast's.  It's pretty arrogant to tell others what to not be concerned about when it's their livelihood on the line.  You're entitled to your own opinion, and so am I, so "please stop" insisting people shouldn't be concerned with their thousands of dollar computers, and personal data that could amount to money lost.  I showed up here only because then event "was not normal," I've been an avast user for quite some time, and I rarely ever show my face here, because things usually run smoothly, but this is highly irregular, so yes I'm concerned.  My main concern is the Google bit, I hate Google!  Just my opinion!

Oh and no disasters are probable either, you seem to be as much of an alarmist as the others you're speaking too.  For years I used Nortons and not Avast and no disaster ever befell me.  I have no idea what you're talking about!  And I've been doing this stuff for quite some time.  My first computer was a Commodore 64 back when they were first marketed.  Been a computer aficionado every since.
Emphasis mine.

Nice that the entire quoted paragraph section is snipped out.  Sorry, I'm walking away from this one for good.  Think and believe what you wish, I'm gone.  Sorry I could not help.   :o
Title: Re: Emergency Update 2013-11-21?
Post by: 1WeirdBug on November 25, 2013, 01:23:44 AM
First time here. Long time Avast user. Generally like it ok... but this possible bug bothers me somewhat.

Ran SAS as well and it listed (x86) HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN#20131121 as a trojan horse. Will most likely not remove it for now, but I am really concerned. I thought it might be due to a new program I installed earlier today, but after checking here, I'm aware that it's not.

Hope to see some clearing up and an a more clear idea of what to do next from Avast. It would be really nice to see.

I'm rather worried to just leave it be... but for now, I will.
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on November 25, 2013, 01:27:23 AM
Mchain,
With respect what this discussion needs is facts, officially from Avast, not assumptions.

Quote
If this emupdate process was something that did not work at all, then I could see the multitude of complaints or suspicions might well be justified, at worst.
But that's not the case here.
As far as I am aware, beyond Vlk's statement that the last emupdate was official, there has been no official statement as to what it was actually supposed to do. There has been no statement as to how one can determine whether it has actually been applied to an installed system, or whether the application was successful. There have been some variations in the reported results (the registry key being left in some installations and not in others). So until someone provides some accurate information, it's not safe to assume it did what it should have.

Quote
What's the at best position?  That avast! actively working on and refining and adjusting emupdate as we speak.
You suggest that as the best position. I guess the worst position would be that they aren't doing anything at all about the emupdate process. Short of an official statement from Avast, either would simply be an assumption.

Quote
Certainly if Vlk or someone else can step in and explain and reassure users that are uncertain and unsure about this, then it would go a long way to assuaging certain fears and doubts here.
I agree, and I'm sure that is what most of us would welcome. Sadly it hasn't happened.

Quote
I can assure you that team members are always busy, but do spare a little time now and then to clarify things here when it is needed.  Otherwise, no, they won't.
I would assume that they are busy, the same as the majority of people doing business in todays conditions, but I'm not sure how you can give anyone the assurance that they will clarify things in the forum when needed. (Unless you are actually an employee of Avast).  Given that the release of Avast 2014 was only recent, the apparent lack of involvement of Avast team members in the forum is rather disappointing.
Title: Re: Emergency Update 2013-11-21?
Post by: joe53 on November 25, 2013, 01:36:59 AM
With all due respect, mchain, I don't feel that most of the posters in this thread are paranoid, including myself. Most are fairly savvy with respect to security, and when avast! throws a curve ball at them, want an explanation. I accept Vik's reply that this is not malware, and is by design, but he really doesn't answer a lot of the questions asked.

Despite using and recommending avast! for years, I have no a priori reason to trust avast! indefinitely. I've seen too many good security programs go bad or bloat to the point that I abandoned many over the years. It is obvious that some here have disabled this startup item without adverse effects, and some have left it intact, also with no ill effects.

If  avast! feels that some of the reasonable questions asked here need no response, because they are too busy to spare the time, then I'm not surprised if some look elsewhere. I've used many AVs over the years, and can't recall a single instance when any of them injected a new program into startup (outside of a version upgrade). In this case, the average user would of course not even be aware that new software was loading at startup. I have a problem with that, on general principles.
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 03:04:57 AM
http://techdows.com/2013/11/avast-emergency-update-startup.html
Title: Re: Emergency Update 2013-11-21?
Post by: plsrepli on November 25, 2013, 06:12:52 AM
http://techdows.com/2013/11/avast-emergency-update-startup.html

I'm not sure I agree with that article and here is why:

My Avast 2014 installations are:
1 PC, running Windows 8.1
1 PC, running Windows 7, SP1 Home Premium

Both have v2014.9.0.2008 (def 131124) but 'ONLY' the 8.1 PC has the additional Emergency Startup enabled.

What I did next:
I did a clean uninstall of Avast 2014 (using first the standard uninstaller and then aswclear via safe-mode).
The above procedure left behind a startup entry listed only as "program" so I had to manually remove the Avast Emergency Startup entry.

Once done, I noticed that my Windows Boot Manager Screen (eg, boot menu) was now available (during startup and reboot) again. BTW, this is what prompted my investigation in the first place (eg, missing boot menu) because it was clearly evident that something had changed, and I have learned to look towards Avast 2014 (first) when new issues arise. And, sure enough, the clean uninstall fixed/restored my missing boot menu/screen.

Next step:
So, I decided to do a clean install of Avast 2014 and waddaya know.... I still have my boot menu and I don't have that Emergency Update in my Startups anymore! All is well for the moment but I really think something got hosed up and that Emergency Update is/was not intended to be permanent.

FYI,

plsrepli
Title: Re: Emergency Update 2013-11-21?
Post by: henri44 on November 25, 2013, 06:54:42 AM
Hello,

Following this new program when Windows starts (emupdate \ dc2941bb-94e1-4b20-4bfe-1d4dd1b6efbb.exe)
- Desinstalled of Avast itself with the "avastclear" tool
- Cleaning with CCleaner and Wise Registry Cleaner
- Install new Avast
- Automatic update with popup and voice VPS 131124-0

stop and restart computer

first observation:
- No folder "emupdate" C: \ Program Files \ Avast Software \ Avast \ setup \
- So no entry in the start of W7 (msconfig and CCleaner)

to follow...

hello,
this morning after starting W7 (Home Edition 32 b)
- Launch the Scheduled Task "Emergency Update avast!"
         - Operation was successful
         - Next execution in 12 hours
- Update the VPS 13112401-1
- No emergency update 20131121 registered at startup
- No folder emupdate in C: \ Program Files \ Avast Software \ Avast \ setup

therefore power user who installs Avast for the first time, this problem is not present

apologize for my broken English
Title: Re: Emergency Update 2013-11-21?
Post by: PamJ on November 25, 2013, 08:14:49 AM
I think I'm one who now has that sitting in SAS quarantine. I remember seeing an avast! start-up item listed when I ran msconfig with a bunch of numbers as the name. Didn't really think much of it. But then I ran SAS and put the two items it flagged as Trojans in quarantine. After reading this thread, I went back through msconfig and now see that odd avast! item is no longer there.  (The other item it flagged as a suspect trojan I know has nothing to do with avast.)

This is what SAS flagged: software\microsoft\ windows\currentversion\run (201211-21)

So, guess I'll just wait like everyone else that's deleted it or had SAS (or something else) remove it to see if it should be reinstalled. Really would like to know what to do...
Title: Re: Emergency Update 2013-11-21?
Post by: abruptum on November 25, 2013, 10:13:50 AM
I am one of those who deleted Avast emupdate from start up (reg key) yesterday.
So far everything is fine.
I believe that this is definitely a bug since some users did clean installation and there is no
Avast emupdate at start up.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 25, 2013, 10:20:53 AM
I am one of those who deleted Avast emupdate from start up (reg key) yesterday.
So far everything is fine.
I believe that this is definitely a bug since some users did clean installation and there is no
Avast emupdate at start up.

It could also be that avast removed the patch provisionally  ???
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 11:43:21 AM
Can we please get a clarification whether this insertnumbers.exe is supposed to start on every boot up now and if not ... will there be another emergency update pushed to correct this problem? In addition it would be nice to get some information about the content of the emergency update.
Thanks!
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 02:05:00 PM
I just rebooted my computer and I didn't see insertnumbers.exe..

I'm not the least bit concerned about the emergency update and I don't understand why anyone is.  ???
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 02:33:33 PM
I just rebooted my computer and I didn't see insertnumbers.exe..

I'm not the least bit concerned about the emergency update and I don't understand why anyone is.  ???

Im not really concerned, its just something unexpected. Have you checked your msconfig (system start) for the exe-file? I do this on a regular basis and I have never seen this exe file (long time avast user). So thats what I call unexpected. And the file name, although its signed, doesn't really help  ;)
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 03:05:24 PM
Now I'm confused.  I updated to the newest version on Nov. 21 but the attachment shows I received an Emergency Update on the same day. 
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 03:11:24 PM
Now I'm confused.  I updated to the newest version on Nov. 21 but the attachment shows I received an Emergency Update on the same day.

Don't be confused, your screenshot only shows firefox running with this topic opened in a tab :) So there is no emergency update running on your machine. What i meant was the startup application which you can find by running msconfig and then look for the entry in the startups.

EDIT: Okay you changed the screenshot. The avastemupdate.exe is always installed, so if you installed avast on the 21st than of course avastemupdate.exe was also copied. The emupdate people here are talking about is an exe-file in the avast/setup/empudate/ folder. There you should find an exe-file with a lot of numbers. The next thing is the startup entry found in msconfig which is pointing to this specific exe file.

I would expext that this startup entry vanishes after one reboot (the update is done) but thats not the case. The "lotsofnumbers.exe" remains as a startup entry. And thats what Im wondering about.
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 03:51:13 PM
 The "lotsofnumbers.exe" remains as a startup entry.

I haven't seen that.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 04:00:19 PM
The "lotsofnumbers.exe" remains as a startup entry.

I haven't seen that.

Go to start, type msconfig and run it, switch to the startup tab and look for two avast entries. One is called avast service. One is the numbers.exe. You have to look at the path. If thats not the case for you Im even more confused now :D
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 04:22:23 PM
These are the only Avast Entries I have.

Sorry for not cropping.

BTW.......I did look at the path for both entries and the numbers for each was 6432 Node.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 04:28:05 PM
These are the only Avast Entries I have.

Sorry for not cropping.

BTW.......I did look at the path for both entries and neither showed any numbers.

What are your entries for the avast services when you expand the command line? Could you make another screenshot please?
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 04:43:31 PM
How do I expand the command line?
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 04:50:14 PM
How do I expand the command line?
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 05:06:03 PM
I tried that and now I have only 1 entry for Avast.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 05:18:15 PM
I tried that and now I have only 1 entry for Avast.

Im not quite sure if you are trolling me :D but obviously you clicked the command button as a whole and sorted the command column alphabetically. There are still the two entries of avast. You have to hold the left mouse button while moving the slider to the right, exactly where the arrow in the previous image is pointing at.
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 25, 2013, 05:24:34 PM
 You have to hold the left mouse button while moving the slider to the right, exactly where the arrow in the previous image is pointing at.

That's what I did.

FYI..........I'm not trolling you.  :)

Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 25, 2013, 05:31:17 PM
You have to hold the left mouse button while moving the slider to the right, exactly where the arrow in the previous image is pointing at.

That's what I did.

FYI..........I'm not trolling you.  :)

Okay :D Just sort the entries again by clicking on the Startup Item Button. Then use the slider :D to expand the column (see pic)
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on November 25, 2013, 06:33:14 PM
Just to add, I removed entry in Crap Cleaner... sure enough I rebooted and the entry is gone..... but still got the emergency update access so I 'Firewalled it'.

Avast is getting too intrusive as of late-:
First with Google Chrome, then with VPN advert pop up at boot up followed by emergency update at boot up - who the hell is using this computer me or Avast?

So reading from all these post... there's a bug in Avast they fix that with an emergency update, are the emergency updates selected or do we receive them ALL at the same time.... are we becoming beta testers on the quiet? Whats happening with the beta testers certainly they never reported these bugs surely or have they been dispatched after being ignored.?

I've submitted a ticket regarding the VPN issue and given them until Wednesday or time to move on, to be honest I've tolerated Avast a bit too long.

Dave
Title: Re: Emergency Update 2013-11-21?
Post by: PamJ on November 25, 2013, 06:42:00 PM
I ended up doing system restore on my older computer to before I did the avast! update to 9.xxx, which was yesterday. I did that mainly to try to fix the Outlook problems the newest avast! program update caused. (I posted this in another thread.) But whatever that weird number emergency update thing is, it was still in the start menu. SAS scanned, said it was trojan, so I put it in quarantine. Doing that, I get this loop when I reboot saying system configuration has changed and I need to reboot computer. I reboot, and then I get the same message again (every time I rebooted this happened). I restored that item from SAS quarantine and now do not get that loop thing.

Weird stuff going on here for me, between this and the Outlook problem.
Title: Re: Emergency Update 2013-11-21?
Post by: avastreally? on November 25, 2013, 10:46:04 PM
I reported it here
http://www.bleepingcomputer.com/forums/t/515228/roguekiller-avast-fp/
detected on every machine that runs avast (mine, mom ,cousin)
Title: V8 ?
Post by: thekochs on November 26, 2013, 03:04:45 AM
As a long time Avast (former AVG, former Norton) Free (Home) & Paid User (Business) use I have been reading this Forum before I did the V9 upgrade......been in this rodeo before when AVG when from great A/V guy to trying to be all things to all people and bricked thousands of PCs.....truly ugly time.  Anyway, Avast has been great, simple, clean, fast, etc.  This V9 is not only not that it should have never been released.....Outlook does not work, JAVA, VPN, Firewall, Browser, etc, etc.....issues.

Also, while I applaud Avast to have a EMU ability to that they can correct a potential brick situation I am floored there is little/no comments on this thread from Avast.  After reading I went into MSCONFIG and found the attached.......note, I'm on V8....not V9/2014.

I can only provide a "guess" based on reading the thread that this EMU on Startup is there to avoid a corrupted Avast from corrupting your login and bricking your machine.  I think the EMU scheduler item is there is periodically update Avast binary (program) code from Avast for items needed that neither require a reboot and/or fix items that a reboot may cause issues with.   Thus, people disabling the EMU on startup may not see a problem if their Avast install is OK but they have eliminated the ability for this EMU to do its thing if there is.  Of course, this is all a guess......WHY ?..........because no one from Avast is taking the time to comment on a thread that is not seven pages long.  :'(

 
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 26, 2013, 09:24:44 AM
Today I tested the emu with a pc which hasn't been switched on for 7 days or so. As expected this exe-file was loaded into the avast folder and the startup entry was created.

Then I tested another PC, did a clean avast install and there was no emu exe-file and no startup entry. What Im wondering about is the fact that the installer from machine 2 was from the 11th of November. The Emu is obviously from the 21st. So what triggered the emu on machine 1 and why wasnt it been triggered on machine 2.

It would really be nice if an avast official could clarify whether this startup entry is supposed to remain there, what issue the emu has addressed and why a fresh installation doesnt trigger the emu. Three simple questions but then I think this thread can finally be closed.

Thank you very much :)
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on November 26, 2013, 12:10:04 PM
I've blocked it in in Host Manager, blocked it in Firewall, turned it off in msconfig and it still gets through..... so I removed the .exe file and guess what?

It still updates, work that one out!

Dave
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 26, 2013, 01:16:56 PM
Hi guys,

Yes these are as expected (i.e. no malware). I agree that the random filename is far from ideal (from the mere suspicousness point of view), but this is how it was originally designed.

While the feature was originally called "emergency update", it is now being used to deliver all sorts of updates/patches into avast. It is a mechanism that can update (patch) avast binaries in a lightweight way, usually without requiring a reboot and going through the whole program update process. It is an important mechanism for us (present already since avast v7) that has already "saved" us a couple of times...

Thanks
Vlk

I read Vlks answer once more and I think that the functionality of the so called emergency updates has changed since this latest incident (thats just my interpretation). If i remember right there were always two entries of avast in the startup. And I think one of them was pointing at avastemupdate.exe. This entry was changed to now point to the randomnumbers.exe which in my opinion is in place to deliver minor program updates.

The original avastemupdate.exe is now only handled by the taskplaner. It gets executed on every startup, every 12h (see triggers) and not as a startup entry. The randomnumbers.exe however should be renamed to streamprgupdates.exe  or whatever to reflect that its not a "one time run exe" (a patch), but more a checking module (thereforce /check parameter) to detect if there are minor program updates on the avast servers.

As I said, thats all my interpretation :)
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on November 26, 2013, 04:32:41 PM
Ijkoy
Certainly didn't for me, honest.... I rebooted three times on a trot and three times it connected, you block a server and they use another one.

Goodbye all, I removed Avast.....  and gone over to a less buggier product. Get your act together Avast and I may consider  coming back.

Dave
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 26, 2013, 04:39:53 PM
Ijkoy
Certainly didn't for me, honest.... I rebooted three times on a trot and three times it connected, you block a server and they use another one.

Goodbye all, I removed Avast.....  and gone over to a less buggier product. Get your act together Avast and I may consider  coming back.

Dave

I think its just a regular part of avast like definition updates, but of course since theres no 100 % clear comment from avast, people are getting annoyed and switch to other av solutions.
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 26, 2013, 04:50:16 PM
Deleted.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 26, 2013, 05:08:35 PM
I think it's good that Avast done this and as you can see in my attachment they shouldn't be disabled.

The avastui you are mentioning has always been there and its of course good :) The other on e with all the numbers is what we are interested in. But i also think that the startup exe is good :)
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 26, 2013, 05:26:53 PM
Today is the first time I've seen this.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 26, 2013, 05:37:42 PM
...can lead to potential disaster.  Please stop. ...
Please stop???  Do you not realize the everyone here is speaking of 'their' computer, and security, not avast's.  It's pretty arrogant to tell others what to not be concerned about when it's their livelihood on the line.  You're entitled to your own opinion, and so am I, so "please stop" insisting people shouldn't be concerned with their thousands of dollar computers, and personal data that could amount to money lost.  I showed up here only because then event "was not normal," I've been an avast user for quite some time, and I rarely ever show my face here, because things usually run smoothly, but this is highly irregular, so yes I'm concerned.  My main concern is the Google bit, I hate Google!  Just my opinion!

Oh and no disasters are probable either, you seem to be as much of an alarmist as the others you're speaking too.  For years I used Nortons and not Avast and no disaster ever befell me.  I have no idea what you're talking about!  And I've been doing this stuff for quite some time.  My first computer was a Commodore 64 back when they were first marketed.  Been a computer aficionado every since.
Emphasis mine.

Nice that the entire quoted paragraph section is snipped out.  Sorry, I'm walking away from this one for good.  Think and believe what you wish, I'm gone.  Sorry I could not help.   :o
mchain, understand, I have nothing against you personally, just making a point that we are all concerned with OUR computers, and that the only thing that shall quell our concern is some cold hard facts, from an, "in the know," authority!  Personally I only want an antivirus program, not all the other crap.  I have an awesome hardware security device/router/firewall with stateful packet inspection and NAT, my LAN IP's are static subnet'ed with masking that precludes spoofing, i.e., all IP's are locked to specific MAC's.  All I really want is Antivirus software to just sit there and watch incoming data, searching for virus matches, where I do a manual update from time to time, not all these attempts to capture software market share, by creating a package that's as huge as a blimp, and does everything including having a kitchen sink, that makes my coffee.  Sometimes this, "making our software more 'robust' to sell more people" just makes me sick. You got to wonder exactly what Snowden was talking about, I mean, how deep it goes!  I mean, I'm an American, they are Czech.  While I'm not prejudice, I'm a "CitizenOfTheWorld," many others out there are!

Not trying to be mean, or cause a scene, just trying to be insightful!
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 26, 2013, 05:45:24 PM
Now I'm confused.  I updated to the newest version on Nov. 21 but the attachment shows I received an Emergency Update on the same day.

Don't be confused, your screenshot only shows firefox running with this topic opened in a tab :) So there is no emergency update running on your machine. What i meant was the startup application which you can find by running msconfig and then look for the entry in the startups.

EDIT: Okay you changed the screenshot. The avastemupdate.exe is always installed, so if you installed avast on the 21st than of course avastemupdate.exe was also copied. The emupdate people here are talking about is an exe-file in the avast/setup/empudate/ folder. There you should find an exe-file with a lot of numbers. The next thing is the startup entry found in msconfig which is pointing to this specific exe file.

I would expext that this startup entry vanishes after one reboot (the update is done) but thats not the case. The "lotsofnumbers.exe" remains as a startup entry. And thats what Im wondering about.
I simply disabled the startup, using MSCONFIG, so far it hasn't set itself up again.  And yes I've seen things that do that. 
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 26, 2013, 05:50:31 PM
You have to hold the left mouse button while moving the slider to the right, exactly where the arrow in the previous image is pointing at.

That's what I did.

FYI..........I'm not trolling you.  :)
Many times there's a quicker way, just hover over the separator line at the top and double click and it will expand automatically to the proper length required to see the entire line.  Sometimes it doesn't work depending on who wrote the software.
Title: Re: Emergency Update 2013-11-21?
Post by: Vapor on November 26, 2013, 07:02:05 PM
I use avast pro (never free)on personal level at home on 3 of my machines for way over decade, and my wife runs offices throughout Ontario with over 50 computers equipped with avast pro.
Since v8 I've had some reservation as far as the reliability,  as the new add-ons were added and it seems that they would cause some minor and in some instances major issue to many users.
In some ways I will agree with CitizenOfTheWorld, avast becoming bloatware and I don't mean size wise as the package, but with the feature/ add-ons that causing more issues and headache than good.
Week ago I have emailed avast on 2 different occasion  with no response to date, that makes you really wonder. My wife have advised me that she  will run avast pro on her machines until subscription expires which is 3 months, and she is done for good after giving avast $ thousands each year for over 7 years, there is no room for ignorance.
We have entered different era of life, this is not only due to recession, its more than that, everyone can feel that in their own way, a lot of businesses that were thriving for years and doing well  will feel the pressure if not already.
Unfortunately a lot of established companies tend to be in some ways  arrogant/cocky  because of doing so well "we have so many clients" that's their  philosophy.  If avast isn't careful, they might eventually end up like some of the reputable companies that were at once top notch, today ether don't exist or straggling to get by. 

 
Title: Re: Emergency Update 2013-11-21?
Post by: Karizma on November 26, 2013, 07:31:51 PM
Has it be said yet if it would safe to delete/disable this yet from startup?
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 26, 2013, 08:17:35 PM
Has it be said yet if it would safe to delete/disable this yet from startup?

Read post 107.
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 26, 2013, 10:51:54 PM
Has it be said yet if it would safe to delete/disable this yet from startup?

What is safe to you?
An update, a so called emergency update, in this particular case, fix's some aspect of the program, in this case this program contacts a google server, in my case it was IP 74.125.225.128 which resolves to ord08s09-in-f0.1e100.net, which is a google server, that at least maintains lists of bad websites, known attack sites and/or forgeries.  I don't know why avast connects to retrieve such info, assuming that's what its doing.  It's probably safe, avast seems to say so, but they seem to be very tight lipped about it.  Personally I think it's some sort of temporary fix, I mean that it's staying in the startup-sequence (yes I had an Amiga once), and that once they get new code generated to update their program, they will delete it. But I could be wrong! Personally, on my computer, I did it for them, because, I'm against anything that's automatic, without my approval, because it's my computer.  But you may see it differently, and then you'd be right for you. Put it this way, your computer won't explode.  I have, like many, multiple lines of defense, so I'm really not worried!  Do what you understand to do, what you feel good about, don't let anyone else sway you one way or the other, knowledge is key!   
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 27, 2013, 12:12:59 AM
http://techdows.com/2013/11/avast-emergency-update-startup.html

Title: Re: Emergency Update 2013-11-21?
Post by: Jimmy10 on November 27, 2013, 12:56:44 AM
How do I expand the command line?
At least you guys have a name in msconfig
 it lists the manufacture as "unknown"
I have this disabled in startup but would really like to know why this is
Title: Re: Emergency Update 2013-11-21?
Post by: iroc9555 on November 27, 2013, 01:13:52 AM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D



Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 27, 2013, 08:04:21 AM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D


i deleted startup entry and i have vps also...i deleted 3 days ago and all ok....An emergency update should not be run on every reboot ...
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 27, 2013, 09:50:05 AM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D


i deleted startup entry and i have vps also...i deleted 3 days ago and all ok....An emergency update should not be run on every reboot ...

And thats why I think they changed the functionality of this module (as Vlk said). Emergency updates used to deliver emergency updates but now the apply minor program updates on startup and mabye real emergency updates on top. Thats why I think they should just rename it to something like streamprgrupdates.exe, then no one would have cared.

But we can speculate for the next 100 years about this emergency update, it will not be solved until an avast member clarifies it (Please just one line :D )
Title: Re: Emergency Update 2013-11-21?
Post by: henri44 on November 27, 2013, 10:44:24 AM
hello,
there are two processes for this "avast! emergency update"
1 - planned to start an assignment and again every 12 hours work (available since version 7)
2 - task unplanned (2013-11-21, 94e1-4b20-dc2941bb-4bfe-1d4dd1b6efbb.exe) that starts with the application launcher windows on every boot, added at a maj vps

November 24 I have uninstalled cleanly and completely free Avast and reinstalled Avast free,
with the new installation not creating the task since 2013-11-21 and still nothing Avast works perfectly,
a person who installs Avast now for the first time, he does not know the problem
cdt
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 27, 2013, 10:53:58 AM
hello,
there are two processes for this "avast! emergency update"
1 - planned to start an assignment and again every 12 hours work (available since version 7)
2 - task unplanned (2013-11-21, 94e1-4b20-dc2941bb-4bfe-1d4dd1b6efbb.exe) that starts with the application launcher windows on every boot, added at a maj vps

November 24 I have uninstalled cleanly and completely free Avast and reinstalled Avast free,
with the new installation not creating the task since 2013-11-21 and still nothing Avast works perfectly,
a person who installs Avast now for the first time, he does not know the problem
cdt

Another speculation: During the installation process of a fresh copy the installer looks for emergency updates and installs them during the installation (no need to create a startup entry). This can be done because Avast is not yet operating and can be patched this way (Files are not yet in use). When you have installed avast for a longer time and an emergency update occurs, then avast creates the startup entry. In my opinion a emergency update which is triggered by avastemupdate.exe is setting up the startup entry for the first time. If there were no emergency update since the 24th, there is no startup entry.
Title: Re: Emergency Update 2013-11-21?
Post by: Ѕeeкɘя on November 27, 2013, 12:09:52 PM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D


i deleted startup entry and i have vps also...i deleted 3 days ago and all ok....An emergency update should not be run on every reboot ...

Same here. Deleted 3 days ago. Received VPS update as usual. But that kid reappeared again with the same name. So, I deleted it again.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 27, 2013, 04:09:10 PM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D


i deleted startup entry and i have vps also...i deleted 3 days ago and all ok....An emergency update should not be run on every reboot ...

Same here. Deleted 3 days ago. Received VPS update as usual. But that kid reappeared again with the same name. So, I deleted it again.

Other people report that it doesn't reappear after they deleted it. But if it reappears, something tells me that avast wants to put this on autostart. Otherwise they would have fixed it in the meantime.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on November 27, 2013, 04:18:41 PM
I don't know about you guys, but since I got 20131121 in my starup list, I have been getting 2 VPS every day. Before that I was like everybody here posting that 2 or 3 days have past without getting any. Yes I was getting Streams Updates and that was giving me a peace of mind, but not the whole VPS. Now avast! 9 is updating like avast! 8 used to do ;D


i deleted startup entry and i have vps also...i deleted 3 days ago and all ok....An emergency update should not be run on every reboot ...

Same here. Deleted 3 days ago. Received VPS update as usual. But that kid reappeared again with the same name. So, I deleted it again.

Other people report that it doesn't reappear after they deleted it. But if it reappears, something tells me that avast wants to put this on autostart. Otherwise they would have fixed it in the meantime.


reboot pc 4 o 5 times and doesn't reappear ....
Title: Re: Emergency Update 2013-11-21?
Post by: DigbyMS23 on November 27, 2013, 07:33:20 PM
For those who have had SuperAntispyware quarantine Run (20131121), herewith a reply from Super to my inquiry on the subject:

"This detection  has been corrected, this was a false positive.  Sorry for any inconvenience this has caused you."

This does not, of course, clear up the mystery about the update from Avast! itself, it only serves to clarify the action taken by SuperAntspyware.
Title: Re: Emergency Update 2013-11-21?
Post by: PamJ on November 27, 2013, 09:15:00 PM
SUPERAntiSpyware, I just updated SAS and ran a new scan on my XP machine. Whatever you did, did the trick as it is no longer showing that avast! file thingy as a trojan as it was before. I haven't had a chance to try it on my Win 7 computer yet, but if it worked on for XP, I'm sure it will work the same on Win 7.

Thank for your attentiveness to and quick fixing of the situation once you knew of the problem.  :)
Title: Re: Emergency Update 2013-11-21?
Post by: CitizenOfTheWorld on November 27, 2013, 10:07:27 PM
The real question is what updates are they talking about?

My Avast setup:

Enabled
------------------------
File System Shield;
Mail Shield;
Behavior Shield;
Script Shield.


Disabled
---------------------
Cloud;
Web Shield;
P2P Shield;
IM Shield;
Network Shield.

This is not my suggestion, just my resolve.

The ONLY thing I want updated, on a regular basis, are the Virus Definitions, which I do manually.

I also use Ad Aware, since their beginning.  Originally a ground breaking program.
Also Malwarebytes.
And a few others occasionally!

I think many people are quite anal about virus protection.  And no, in my history, since the general public was first given access to the Internet, I've never had any kind of serious outbreak.  A few things here and there, but I've always simply removed them.  Before the Internet I also had a few, given to me via floppies, again they were no big deal.

IMHO, all one needs are good hardware "AND" software firewalls, monitoring both incoming and outgoing traffic, running in stealth mode, and a good anti-virus program.  No, not one with all kinds of bells and whistles, just a plain vanilla, REALLY STRONG, antivirus program! And that's it!
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 28, 2013, 09:28:53 AM
I actually cant believe that we dont have an official answer about this startup entry yet. I mean mods see this thread with its 9 pages and just overlook it? People are highly interested in that topic (6500 views). Thank you again!
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on November 28, 2013, 03:50:10 PM
I actually cant believe that we dont have an official answer about this startup entry yet. I mean mods see this thread with its 9 pages and just overlook it? People are highly interested in that topic (6500 views). Thank you again!

That speaks volumes about the current Avast Team.
Title: Re: Emergency Update 2013-11-21?
Post by: Vapor on November 28, 2013, 05:14:33 PM
Yap, its been how long now :o and no info on the new start up entry.
I did allow the new entry while my firewall was nagging about, and normally i would get adware popup about VPN, not this time so that's OK, but we still don't know what this start up entry belongs to since emergency update start up already exists ::)
Title: Re: Emergency Update 2013-11-21?
Post by: BearPup on November 28, 2013, 08:45:34 PM
I actually cant believe that we dont have an official answer about this startup entry yet. I mean mods see this thread with its 9 pages and just overlook it? People are highly interested in that topic (6500 views). Thank you again!

That speaks volumes about the current Avast Team.

Yes it does. Its why I have
I actually cant believe that we dont have an official answer about this startup entry yet. I mean mods see this thread with its 9 pages and just overlook it? People are highly interested in that topic (6500 views). Thank you again!

That speaks volumes about the current Avast Team.
Yes it does. Its why I've switched to AVG, which has garnered ratings at least equal to Avast, and in one case (PC World), beat Avast winning an Editor's Choice award.
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on November 28, 2013, 09:02:39 PM
And little ol me gone over to Noddy.

Tell you what pewter runs a lot smoother now and a wee bit faster..... and Privacy Guardian is only cleaning about 10 files with Avast it was 30+, so what was it cleaning - the sewers?

All the bugs say's a lot for their beta testers, have they gone to sleep? It 'appears' to me anyway that we are all  being used as beta testers, emergency updates ring a bell, the reason perhaps?

You can tell a good AV from it's Forum!


Dave
Title: Re: Emergency Update 2013-11-21?
Post by: EmoHobo on November 29, 2013, 04:37:40 AM
All these pages and no official response, groovy.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on November 29, 2013, 09:34:49 AM
Found two additional threads:

1. http://forum.avast.com/index.php?topic=103531.0

The op describes that avastemupdate triggers the numbers.exe. This is from 2012. So there avastemupdate triggered the numbers.exe. But now it seems that its triggering itself with a /check parameter in the startup. But what is avastemupdate then doing, maybe only downloading the numbers.exe and setting up the startup entry?

2. http://forum.avadas.de/threads/6049-Emergency-Update-beim-Start-von-Windows

Its german, but the op describes that after a clean installation, with previous removal of avast, the startup entry reappeared one day later again.

So please Avast enlighten us. Its almost weekend :) Thanks

Title: Re: Emergency Update 2013-11-21?
Post by: Davy on November 29, 2013, 01:21:02 PM
It didn't re-appear for me after removal... and I removed it three times. Mind you I scanned the registry for anf left overs-:
First off all do a manual search for Avast and then Alwil in 'Search folders and files', then  into Reg Edit.....

reg edit, click File tab and click 'Find' entering the name in the Find window..... Search for Avast and then Alwil after, you will find some entries won't delete - but they WILL if you give them permission, simply right click on the said folder(s) and click permissions then click 'allow all'.

Do this again and again until the search come up empty.

Neither removal tools, I repeat again NEITHER removal tools removes ALL Avast? Alwil entries in the registry.

Again-:
I stopped the start up in ms config, I even removed the start up .exe file.... but there was Still the thing popping up at boot up, now once a day but every time I booted up. Just as others have been finding out.

Will there ever be a day when Avast is less buggier?

Dave
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on November 29, 2013, 01:27:15 PM
With the exception of the WinPatrol popup several days ago I haven't had any Emergency Update popups.
Title: Re: Emergency Update 2013-11-21?
Post by: michaelmango on November 30, 2013, 01:22:17 PM
I just found this looking at my startups on CCleaner. Thought it looked suspicious. I'm seriously thinking about changing programs too. The ad popups were already annoying me.
Title: Re: Emergency Update 2013-11-21?
Post by: Acco on December 02, 2013, 08:10:28 AM
I noticed the "random number" Emergency Update in my msconfig startup list also last week, prior to upgrading to Avast 2014.
I deleted that entry, due to Avast clearly avoiding any decent explanation of "why" it appeared there. Here this thread is 10 pages long, yet the one (and only) very brief comment by Vik appeared to answer 0 details of this entry, while raising more questions and concerns very significantly.

Also, what puzzles me is why is there a hidden scheduled "Emergency Update" in the scheduled tasks? After all, there is already streaming updates enabled in Avast, which I assume streaming updates mean any update can be streamed immediately... 24/7/365. Correct? So why the need for the hidden "scheduled task"?
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 02, 2013, 10:42:51 AM
I noticed the "random number" Emergency Update in my msconfig startup list also last week, prior to upgrading to Avast 2014.
I deleted that entry, due to Avast clearly avoiding any decent explanation of "why" it appeared there. Here this thread is 10 pages long, yet the one (and only) very brief comment by Vik appeared to answer 0 details of this entry, while raising more questions and concerns very significantly.

Also, what puzzles me is why is there a hidden scheduled "Emergency Update" in the scheduled tasks? After all, there is already streaming updates enabled in Avast, which I assume streaming updates mean any update can be streamed immediately... 24/7/365. Correct? So why the need for the hidden "scheduled task"?

Afaik streaming updates only update virus definitions and not the programm itself. Let me do another speculation:

Why would someone need an update to be executed on every boot? If theres a bug in the program it could be fixed with a run once update. But lets assume there is a bug with AOS and the latest firefox or Chrome. So if a user installed avast and afterwards decides to switch from IE to Chrome there would be the bug  which only can be adressed by an emergency update. So how would you do this as an avast programmer. You don't know when and if a user switches browsers. So I think I would create a startup entry to "check" for the existence of Chrome or Firefox and then I would run it if necessary.
Title: Re: Emergency Update 2013-11-21?
Post by: Lisandro on December 02, 2013, 12:48:39 PM
When any avast! programmer post here, just let me know...
We (mostly) have few spare time for speculations ;D
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 02, 2013, 03:17:04 PM
When any avast! programmer post here, just let me know...
We (mostly) have few spare time for speculations ;D
Excuse me, but you are a member of the Avast! Team, aren't you?
Title: Re: Emergency Update 2013-11-21?
Post by: moses_x on December 03, 2013, 12:42:22 AM
No answer, no fix ??? :'(
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 03, 2013, 09:31:13 AM
No answer, no fix ??? :'(

Are there actually any programmers from avast here in the forums? My suggestion would be to make a sticky thread with all emupdates listed. People who post here are in general more concerned about IT security and don't like to their computers to be remote controlled. However if we know what is happening i would be okay with that along with the majority of posters in this thread (i suppose).
Title: Re: Emergency Update 2013-11-21?
Post by: dlp69 on December 03, 2013, 01:13:54 PM
Ultimately this is about trust...

Scenario A - Avast has mal intent and is infecting and/or spying on everyone and not posting here
Scenario B - Avast royally screwed up, thought they would quietly put a fix in and just doesn't want to admit it or lie so they are not posting
Scenario C - Avast is spying/infecting/screwing up and does decide to finally post on here and says the emupdate is going to put rainbows and pics of puppies in your documents and make you all millionaires.

This thread is two weeks old and continues to grow.  They are reading it... people from avast have posted in here... people from avast have posted in other posts about this thread.  They are just not posting an official answer.  Is this due to lack of communication within their organization... is this because the people that are posting are in business and only the programmers have the info on what the emupdate actually is and they don't waste their time in the forum or are extremely busy... who knows?  I'm sure there are politics within their organization as there is in most corporations... I know in my company if I need an answer from IT in any timely manner I need to march over there and stand in there cube and wait for it... but I'm a go getter, I don't expect that trait to exist everywhere nor do I know what's it's like to work in the Czech Republic...

So... do you trust them or do you start finding a different AV?  If you don't trust them to put an emupdate in, or trust them to do whatever they are going to do... then perhaps the answer is obvious.

They are your anti virus provider... nothing to see here... move along... move along...
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 03, 2013, 01:34:03 PM
Ultimately this is about trust...

Scenario A - Avast has mal intent and is infecting and/or spying on everyone and not posting here
Scenario B - Avast royally screwed up, thought they would quietly put a fix in and just doesn't want to admit it or lie so they are not posting
Scenario C - Avast is spying/infecting/screwing up and does decide to finally post on here and says the emupdate is going to put rainbows and pics of puppies in your documents and make you all millionaires.

This thread is two weeks old and continues to grow.  They are reading it... people from avast have posted in here... people from avast have posted in other posts about this thread.  They are just not posting an official answer.  Is this due to lack of communication within their organization... is this because the people that are posting are in business and only the programmers have the info on what the emupdate actually is and they don't waste their time in the forum or are extremely busy... who knows?  I'm sure there are politics within their organization as there is in most corporations... I know in my company if I need an answer from IT in any timely manner I need to march over there and stand in there cube and wait for it... but I'm a go getter, I don't expect that trait to exist everywhere nor do I know what's it's like to work in the Czech Republic...

So... do you trust them or do you start finding a different AV?  If you don't trust them to put an emupdate in, or trust them to do whatever they are going to do... then perhaps the answer is obvious.

They are your anti virus provider... nothing to see here... move along... move along...

Scenario D: They actually dont care about about 0,04 % of the 25 millions. But you are right, its all about trust, especially for an antivirus program, which has actually complete control of my system. I always recommended avast to my friends, installed it on several machines (i wouldnt do it at the moment). Im not giving up on avast, but things like this topic do not really help.

Im already reading something about a grimfighter feature in the next build (http://forum.avast.com/index.php?topic=141747.0). If this is the course Avast is going (no communication, adding more and more useless stuff) i will look for an alternatve.
 
Title: Re: Emergency Update 2013-11-21?
Post by: dlp69 on December 03, 2013, 02:10:47 PM
Im already reading something about a grimfighter feature in the next build (http://forum.avast.com/index.php?topic=141747.0). If this is the course Avast is going (no communication, adding more and more useless stuff) i will look for an alternatve.

WOW!  Ummm... yeah... that will be the end of my time with Avast most definitely...  As a matter of fact, you'd really have to be blind not to see all the signs right now of what's to come. 

I have (turning very quickly to had) trust with Avast and their recommendations from me have already dropped down to zero until they resolve at least some of the issues, but I still have some faith that they are going to turn this around.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 03, 2013, 03:12:22 PM
Some really level-headed posts here - thank you, guys!

Yes, it's about trust.

It's also about whether the product is continuing to provide the specific functionality we need.  Perhaps it is being molded more and more into a super-dumbed-down package for the masses of data consumers, without any longer a care about whether it's well-matched to the needs of professionals and computer users, who are actually aware of how their systems work.

We are forced to speculate, because we're not hearing "yes, that's the way it's supposed to work".

Lines of communications need to kept OPEN.  We need to understand that these things are being done on purpose.  We CARE about our computer systems, which is why we have the Avast! product installed.  There will never be a good time to have a Twilight Zone approach, "Do not adjust your TV set...  We have control..."

Let us hear from the Avast! team, please...  Edit:  Finally found the mentioned post by Vik, stating "yes, that's the way it's supposed to work".  Is Vik an official with Avast!?  I don't see any indication he is.  "Global Moderator, Serious Graphoman" means nothing.

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 03, 2013, 03:48:39 PM
Obviously posting here is useless at this point. Try elsewhere (e.g. Wilders Security, etc) and see what happens.
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 03, 2013, 04:48:03 PM
Edit:  Finally found the mentioned post by Vik, stating "yes, that's the way it's supposed to work".  Is Vik an official with Avast!?  I don't see any indication he is.  "Global Moderator, Serious Graphoman" means nothing.
-Noel

He is the Chief Technical Officer afaik, so yes he is an official. But why not clear things up a little bit more so this thread can finally die?
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on December 03, 2013, 05:27:26 PM
They don't want ya to know....  I've moved on and bug free thank God.

When my license runs out it stays run out,  then what once my main drive will be wiped and......  Avast with it.  At least I'm bug free and my machines running smoother.... and less Google interference!

Their beta testers have gone to sleep.... it wouldn't surprise me if we was doing their job!

Dave



Title: Re: Emergency Update 2013-11-21?
Post by: Randissimo on December 03, 2013, 07:24:01 PM
I noticed the "random number" Emergency Update in my msconfig startup list also last week, prior to upgrading to Avast 2014.
You're lucky at that. All I'm ever seeing in the new autostart section of the task-manager in Windows 8 is an entry with the name "program" without any details or settings available.
However, I checked for it and found out, that you can supposedly delete/view those entries with CCleaner:
https://social.technet.microsoft.com/Forums/windows/en-US/be02e931-eada-4a49-8f95-2ed47d64be10/windows-8-startup-items?forum=w8itprogeneral (https://social.technet.microsoft.com/Forums/windows/en-US/be02e931-eada-4a49-8f95-2ed47d64be10/windows-8-startup-items?forum=w8itprogeneral)
So I've deactivated the entry in the task-manager to find the emergency-update entry in CCleaner deactivated as well. Then I've activated it again in the task-manager to see it activated again in CCleaner.
They should've at least signed their emergency updates.

Scenario B - Avast royally screwed up, thought they would quietly put a fix in and just doesn't want to admit it or lie so they are not posting
If it's scenario B, I can at least sympathize with them.
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 04, 2013, 03:26:23 PM
[OT?]

I've found this pretty interesting: http://forum.avast.com/index.php?topic=141423.msg1027968#msg1027968
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 04, 2013, 05:50:19 PM
[OT?]

I've found this pretty interesting: http://forum.avast.com/index.php?topic=141423.msg1027968#msg1027968

This thread started 6 days after the emu from the 21st. I think its something different. It would be interessting to know whether people who were automatically updated to 2014 have now 2 additional startup entries (with two emu numbers.exe). If thats the case It think its clearly a bug. If not, the 21st november emu is working as intended (on every reboot) and I think it touches something like Chrome or FF AOS.
Title: Re: Emergency Update 2013-11-21?
Post by: Davy on December 05, 2013, 01:45:58 AM
I deleted the start up entry, disable self defense module then use Crap Cleaner, I even manually deleted it's .exe start up file.... and it still updated.

I've moved away from Avast still on my back up drive, one thing for sure I get far less traffic from Google, maybe  we are the beta testers... they've sure gone to sleep on here.

Once you start to worry about ANY AV it's time to kick it in the long grass.

Dave
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on December 05, 2013, 04:22:39 AM
[OT?]

I've found this pretty interesting: http://forum.avast.com/index.php?topic=141423.msg1027968#msg1027968

Yes, me too.
I'm not greatly impressed by the "Microsoft made us do it" excuse for forcing those on earlier versions up to build 2008. There should have been warnings posted that versions below this were not approved/certified to be used on Windows 8, but the decision to update a users system to a different version should have been left to the user.

That said, it appears to have only been relevant to Windows 8, not windows 7. The bunging in of the RUN instuction across the board may have been done for expediency, but leaving in a unnecessary check to be done at every reboot in systems where it wasn't even relative is in my book rather poor.
Having done a full clean install of 2008 again last week end, I can confirm that neither the Run entry, nor the "random character" file has appeared, which confirms my view that it isn't necessary for those using 2008 on Windows 7 to be still having the check run each bootup.
Title: Re: Emergency Update 2013-11-21?
Post by: miguelgrado on December 05, 2013, 11:57:28 PM
how  It may be possible that we do not have an official response yet.. :(
Title: Re: Emergency Update 2013-11-21?
Post by: dlp69 on December 06, 2013, 12:19:00 AM
how  It may be possible that we do not have an official response yet.. :(

Dude... let it go.. this thread's dead.  They aren't going to answer.  If you don't trust them find another AV.  As a matter of fact depending on what they do with the next release I would recommend it anyway.  They are installing something called grime fighter and save price or some other bloatware.  I think Avast has lost it's way
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 06, 2013, 08:48:54 AM
how  It may be possible that we do not have an official response yet.. :(

Dude... let it go.. this thread's dead.  They aren't going to answer.  If you don't trust them find another AV.  As a matter of fact depending on what they do with the next release I would recommend it anyway.  They are installing something called grime fighter and save price or some other bloatware.  I think Avast has lost it's way

Grimfighter will be an optional module which you can choose to not install (http://forum.avast.com/index.php?topic=141747.0) with the next beta build. The first build automatically installed it.

Back to the topic: I actually dont want to let it go. Its such a small effort for a programmer to post 1 line in this thread. So please Avast, i beg you, its St Nicholas' Day, just put a little answer into our boots! :)

Title: Re: Emergency Update 2013-11-21?
Post by: waking on December 06, 2013, 09:19:50 AM
Is Vik an official with Avast!?  I don't see any indication he is.

-Noel

He's Chief Technology Officer.

Go to the "About" page at avast.com (Support->Company) and click on

Ondřej Vlček CTO

under "Management" to read his profile.
Title: Re: Emergency Update 2013-11-21?
Post by: Lisandro on December 08, 2013, 09:01:56 PM
He is the guy :)
Title: Re: Emergency Update 2013-11-21?
Post by: doomer on December 10, 2013, 12:38:03 PM
I have a serious problem with the Avast Emergency Update from 23.11.2013.

I've seen this process run twice on my system this week, and every time it has run, it has almost completely frozen my system. Almost all programs became unusable, all browsers freeze, skype freezes, I cannot shut down or restart, and cannot kill the 3614329593somemorenumbers.exe process, which also happens to be digitally signed by Avast Software. I used the reset button the first time, and today it happened again and I realized I can just disable avast self protection module and kill the process. The moment it is ended, everything is normal again.

Something is seriously wrong with this emergency update feature, as I didn't have this problem before updating to Avast 2014.9.0.2008. It cannot be uninstalled either from avast setup. I am using Vista 32 bit.
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 10, 2013, 02:34:07 PM


I've seen this process run twice on my system this week, and every time it has run, it has almost completely frozen my system. Almost all programs became unusable, all browsers freeze, skype freezes, I cannot shut down or restart, and cannot kill the 3614329593somemorenumbers.exe process, which also happens to be digitally signed by Avast Software. I used the reset button the first time, and today it happened again and I realized I can just disable avast self protection module and kill the process. The moment it is ended, everything is normal again.

Something is seriously wrong with this emergency update feature, as I didn't have this problem before updating to Avast 2014.9.0.2008. It cannot be uninstalled either from avast setup. I am using Vista 32 bit.

Should you want to give your issues more visibility, I suggest that you start a new thread describing again the problem, since the main topic of this current thread has been totally ignored by the Avast team.

Good luck
Title: Re: Emergency Update 2013-11-21?
Post by: kd5 on December 18, 2013, 05:05:41 AM
Can't believe that after 11 pages no one from the Avast! team has stepped up to explain what in the hell this 20131121 Startup entry is supposed to accomplish, and why it was installed as a separate Startup entry from the regular update.  I HATE unnecessary things running at Startup on my computer, why should Avast! have 2 updaters?  What is this 20131121 Startup entry supposed to accomplish?  And why don't they get it worked into the already existing Startup entry for the Avast! updater?  Would someone from Avast! please step up and address our concerns?  Thank you!
Title: Re: Emergency Update 2013-11-21?
Post by: Ijkoy on December 18, 2013, 09:43:37 AM
It would be nice to know if the new beta update removes the startup entry. Anyone here with a beta installation without cleaning avast first?
Title: Re: Emergency Update 2013-11-21?
Post by: AndreiRC on December 18, 2013, 12:40:55 PM
Updated to 9.0.2011 last night.

It's a Nov 24th emergency update for me, but yes, it's still in the Emupdate folder and in the start-up list.
Title: Re: Emergency Update 2013-11-21?
Post by: Cyberpunk on December 18, 2013, 09:56:19 PM
I updated to 9.0.2011 today and install froze while running a program called AvastEmUpdate.exe.

(http://img35.imageshack.us/img35/4039/7s0f.png)

I rebooted and all signs show that 9.0.2011 was installed succesfully. There is no emupdate folder in the setup folder, but there is a random EXE, called 1d494dae-f469-4b6b-a1ae-a220a5d59f38.exe in

C:\Program Files\AVAST Software\Avast\setup

Luckily, it doesn't start up, so there's no entry to be found in msconfig nor in CCleaner.
Title: Re: Emergency Update 2013-11-21?
Post by: zorgon on December 19, 2013, 02:59:16 PM
I have noticed that avast 2014 takes considerably longer to load than v8. In fact sometimes Windows gives a pop-up stating that the firewall is not enabled before it goes away and avast finally shows up in the system tray. I wonder if the longer load time could be due to the Emergency Update in Startup which has to load first before avast?
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on December 19, 2013, 03:49:00 PM
Just now found this and it's showing up in my startup programs.  Since it shows it was installed on the 17th, the same day I updated to this latest version of Avast guess I won't worry about it.

It hasn't affected my computer in any way.
Title: Re: Emergency Update 2013-11-21?
Post by: SpeedyPC on December 19, 2013, 03:56:41 PM
Just now found this and it's showing up in my startup programs.  Since it shows it was installed on the 17 the same day I updated to this latest version of Avast guess I won't worry about it.

@-midnight you're correct you have nothing to worried about the Emergency Update problem we knew that long ago, the real question is you have to trust Avast AV software that's doing it job otherwise keep on complaining mean you can't trust yourself with Avast.
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on December 19, 2013, 04:29:43 PM
@SpeedyPc,

I do trust Avast and have been trusting it since more years that I can remember.  :)
Title: Re: Emergency Update 2013-11-21?
Post by: Cyberpunk on December 21, 2013, 05:19:05 PM
In this thread http://forum.avast.com/index.php?topic=142936.msg1038909#msg1038909 (http://forum.avast.com/index.php?topic=142936.msg1038909#msg1038909) essexboy suggested that MVPS's HOSTS file could be the culprit. So I disabled the HOSTS file, did a clean install and it went fine. I enabled the HOSTS file again and so far, no problems. I hope someone can tell me which domain is causing problems, so I can remove it from the HOSTS file...
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 21, 2013, 05:34:52 PM
My question is this:  Given that avast.com does not appear in the MVPS hosts file, why would Avast! be dependent on another domain (presumably one that's specifically blocked by that hosts file)?

Are we being tracked?  Is our usage information being sent to a 3rd party, presumably to make Avast! more money?  Has Avast! software itself been infected with malware?

If so, Avast needs to stop doing that. 

We don't need security software that a) potentially exposes us to other security / privacy problems, and b) fails without a timeout if a 3rd party web site is unable to be reached.

Of course, we could stop speculating about how bad this COULD be if Avast! would actually make an official statement on the matter.  It could be something as simple as a stack overflow because the hosts file is so big...  But we just don't know...

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: dlp69 on December 21, 2013, 05:46:07 PM
My question is this:  Given that avast.com does not appear in the MVPS hosts file, why would Avast! be dependent on another domain (presumably one that's specifically blocked by that hosts file)?

Are we being tracked?  Is our usage information being sent to a 3rd party, presumably to make Avast! more money?  Has Avast! software itself been infected with malware?

If so, Avast needs to stop doing that. 

We don't need security software that a) potentially exposes us to other security / privacy problems, and b) fails without a timeout if a 3rd party web site is unable to be reached.

Of course, we could stop speculating about how bad this COULD be if Avast! would actually make an official statement on the matter.  It could be something as simple as a stack overflow because the hosts file is so big...  But we just don't know...

-Noel

LOLOLOLOL!!!!!!

Welcome to 2014... every single thing you do is being watched and all your information is being sold by every company out there.  Whether they say they are not and unless you are going to hire a team of lawyers and write up your own contract and give it to a company that you intend to do business with and have that company sign off on it... then you can assume that company already has a loophole allowing them to do whatever the hell they want.  Greed rules this planet now.
Title: Re: Emergency Update 2013-11-21?
Post by: Cyberpunk on December 21, 2013, 05:48:24 PM
My question is this:  Given that avast.com does not appear in the MVPS hosts file, why would Avast! be dependent on another domain (presumably one that's specifically blocked by that hosts file)?

It's not unheard of, using several domains. For instance, Yahoo uses yimg.com and Facebook uses akamaihd.net as CDN.
Title: Re: Emergency Update 2013-11-21?
Post by: Randissimo on December 21, 2013, 05:50:23 PM
You also need to turn of hosts file to register from the GUI in the first place if you're too lazy to create a new fake account, so you're being tracked either way.

edit:
It's not unheard of, using several domains. For instance, Yahoo uses yimg.com and Facebook uses akamaihd.net as CDN.
None of those are part of the MVP-hosts file and no entry from there makes any normal and legit website to stop working.

edit2: as if that wasn't enough, just take a look at your IPs in every post you've made here so far.
Title: Thinking About This Seriously
Post by: NoelC on December 21, 2013, 06:10:42 PM
In all seriousness...

Anyone NOT using the MVPS hosts file is exposing themselves to a LOT more risk than those who are.  As a leading-edge security software company Avast should be well aware of that, and should in fact embrace the concept - not make software that's incompatible with it!

With the ability to drop load new software at any time, why wasn't this fixed hours after the latest MPVS hosts file was released (assuming that's the version that broke it)? 

The question takes on even more significance if Avast actually released AvastEmUpdate with an inherent incompatibility with the existing hosts file at the time (I don't know whether this was true).  I do know the latest hosts file was released on December 6 - two weeks ago.

I'm sorry to be blunt, but 20 years experience and 200 million trusting users don't count for much if you screw up in a way a high school programmer could avoid - then LEAVE it screwed up even with a state-of-the-art cloud-integrated software update system.

I'm not at all happy to have to move aside the hosts file to facilitate Avast's software updates, and it again makes me wonder whether Avast! should be my security software of choice.  This needs to be fixed!  Hell, why isn't it already fixed since yesterday afternoon, when I first reported the problem was a conflict with the hosts file?

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: Ѕeeкɘя on December 21, 2013, 07:07:18 PM
In all seriousness...

Anyone NOT using the MVPS hosts file is exposing themselves to a LOT more risk than those who are.  As a leading-edge security software company Avast should be well aware of that, and should in fact embrace the concept - not make software that's incompatible with it!

With the ability to drop load new software at any time, why wasn't this fixed hours after the latest MPVS hosts file was released (assuming that's the version that broke it)? 

The question takes on even more significance Avast they actually released AvastEmUpdate with an inherent incompatibility with the existing hosts file at the time (I don't know whether this was true).  I do know the latest hosts file was released on December 6 - two weeks ago.

I'm sorry to be blunt, but 20 years experience and 200 million trusting users don't count for much if you screw up in a way a high school programmer could avoid - then LEAVE it screwed up even with a state-of-the-art cloud-integrated software update system.

I'm not at all happy to have to move aside the hosts file to facilitate Avast's software updates, and it again makes me wonder whether Avast! should be my security software of choice.  This needs to be fixed!  Hell, why isn't it already fixed since yesterday afternoon, when I first reported the problem was a conflict with the hosts file?

-Noel

I knew about hosts file but 'MVPS' made me curious. Although I don't mess around with the host file and use the tracking protection and other such privacy list inside the browser, this is actually interesting. But I do take care of where the program is trying to call. For e.g Avast GUI makes a call to googleanalytics. Since I am not at a loss if I block its access to internet, I made an entry in firewall. I'll take a look at this mvps thing.
Title: Re: Emergency Update 2013-11-21? [OT]
Post by: Cyberpunk on December 21, 2013, 07:15:18 PM
edit2: as if that wasn't enough, just take a look at your IPs in every post you've made here so far.

Do you think other websites do not log your IP? If you're that paranoid, then you may want to use the TOR network...
Title: Re: Emergency Update 2013-11-21?
Post by: Randissimo on December 23, 2013, 01:18:42 PM
No, I'm not that paranoid, but it leaves a strange impression to see my IP adresses in every post I've made so far.
edit: I don't know whether there is some truth in what's written in the privacy policy of some other websites, but some of them at least delete the information about IP addresses after a while.
I know that they are storing it to prevent abuse, but in my mind, it would be nice, if at least the logging in older postings would be removed after a while.
Title: Re: Emergency Update 2013-11-21?
Post by: AdrianH on December 23, 2013, 01:26:52 PM
No, I'm not that paranoid, but it leaves a strange impression to see my IP adresses in every post I've made so far.
edit: I don't know whether there is some truth in what's written in the privacy policy of some other websites, but some of them at least delete the information about IP addresses after a while.
I know that they are storing it to prevent abuse, but in my mind, it would be nice, if at least the logging in older postings would be removed after a while.

The IP logging is a feature of the forum software,not something added by avast.

All forum software does this, some only show the IP to the site staff, here SMF shows you, the poster, and the staff the IP address you came in on.

Nobody else can see your details.
Title: Re: Emergency Update 2013-11-21?
Post by: Harikrishnan on December 23, 2013, 02:08:01 PM
(http://)
This is 10th emergency update(i have to configure my Win7 Firewall Control every time to update)....but no update popup or sound until now....? really bad.... :-\
Title: Re: Emergency Update 2013-11-21?
Post by: Randissimo on December 23, 2013, 02:12:52 PM
The IP logging is a feature of the forum software,not something added by avast.

All forum software does this, some only show the IP to the site staff, here SMF shows you, the poster, and the staff the IP address you came in on.

Nobody else can see your details.
It would be nice if the stored IP addresses were deleted after a while and if only site staff (administrators and tech guys) were able to see them, but that's just my opinion. Let's leave it at that, I don't want to go off-topic any further on this matter.
Title: Re: Emergency Update 2013-11-21?
Post by: SpeedyPC on December 23, 2013, 02:14:24 PM
@Harikrishnan in your firewall look for 'AvastEmUpdate.exe' and set them to allow I mean give this file full access through inbound & outbound traffic both ways and your problem is solved.

I've set mind for Outpost Pro long ago and I've never had any issue.
Title: Re: Emergency Update 2013-11-21?
Post by: UserA789 on December 26, 2013, 08:23:08 PM
Like many of these professionals I went to do some 'reg' cleaning and such and found the following start-up entry (as well as conime.exe once again running that no one seems to want to help but that a different thread).  Seriously, has Google paid you so much you forgot what client privacy is ALL about?  And why am I finding out it connect with google to do this?

I had no idea Avast was no longer the company it started as and is now simply another Google company.  :o

This morning (23 Nov.), WinPatrol alerted me that avast had placed an emergency update in my startup, to be run upon reboot.

Emergency Update 20131121 (presumably the date, 2013-11-21) ,
filename:  4749EAC5-AD58-436B-8F6C-CB01BA377D62.EXE
[EDIT:  It seems the executable filename is random/different for every person.]

At first, I thought/expected this was a RUN-ONCE, to fix something... but after rebooting (and presumably having run), I see it remains in my startup list to be run EVERY time I reboot.

1) Can someone enlighten us as to the nature (reason) for this emergency update?   What did it address/fix?
2) Why is this fix running every time I reboot, rather than just doing the job once?

System info:  Avast 8 on Win7x64 Pro SP1
Seriously Avast... what is going on and how much did Google pay you to sale us out just like they sold us out to the NSA?

I have no idea what changes could have taken place in the3 Avast organization but its obvious marketing has become MUCH moreimportant to Avast than security... from it CONTINUALLY asking if I want Chrome (both installed and as my default browser) every program update.

Why does the entry (see pic) NOT get removed from my startup and why such a vague description?

On the other hand, the file IS digitally signed by avast, so it should be legitimate.
This used to be the case; however, SSL certificates and Digital File signatures are a matter of hours to LEGITMATLY fake and decrypt at this point in the game.  If anyone was paying attention 2 years ago; this was already discussed and proven as one german hacker (who will still break certs and sigs for $$$) did it with a PS3 super build (multiple PS3's SCSI'd together as a kind of supercomputer)... he's is still getting paid.

At this point someone said it best and I coulnt find there post to quote:

If the majority consensus just stops buying a thing... will the company go out of business (regardless of stock trades)?

I added the last part in parenthesis to accentuate the message.


#33rd -look at the logic gentlemen and ladies; this aint right.


WHAT HAPPENBED TO THE REAL AVAST AND THERE ORIGINAL MISSION?

 >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(  >:(
(...at this point its getting rather close to being worth the headache of the bottlenecking Norton creates)
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on December 28, 2013, 11:26:48 AM
This popped up just a few minutes ago.  If it's no longer going to run at start up why notify me for the umpteenth time?
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 12:36:04 PM
This popped up just a few minutes ago.  If it's no longer going to run at start up why notify me for the umpteenth time?

Why - Just read what is on the WinPatrol screen and then consider the comments about this previously being a run always and you should get your answer.

This is now a RunOnce function as you will see in the WinPatrol Startup Programs tab, you should also see if the 'Notify me if a Startup Auto Setting is Removed' is checked (default option), so WinPatrol is just doing what is asked of it.
Title: Re: Emergency Update 2013-11-21?
Post by: Sgt.Schumann on December 28, 2013, 01:46:53 PM
It's nice to see that this mysterious "Run" entry has been finally removed by one of the updates today ... can confirm it on my machine here too  :)
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on December 28, 2013, 02:13:36 PM
I just  received update 13-12-27-1, and the Emergency Update 2013-11-21 is still showing as "RUN" in my WinPatrol  [Avast8 on Win7x64]

WHICH update(s) is changing it to RUN ONCE and/or removing it?
Title: Re: Emergency Update 2013-11-21?
Post by: Sgt.Schumann on December 28, 2013, 02:21:06 PM
I do not know which update exactly removes this entry, but yesterday evening it was still there and today afternoon it is not there anymore ... without any interaction of my side ... (avast! 2014.9.0.2011 - 131227-01 on Win7 Pro 64, no modified hosts file).
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 02:25:35 PM
I just  received update 13-12-27-1, and the Emergency Update 2013-11-21 is still showing as "RUN" in my WinPatrol  [Avast8 on Win7x64]

WHICH update(s) is changing it to RUN ONCE and/or removing it?

They are in my opinion old/current entries and given what I said about WinPatrol, essentially this is changing to a RunOnce scenario and until you reboot it hasn't RunOnce.
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 28, 2013, 02:33:58 PM
The latest run entry has been obviously removed (since it's a RunOnce function), but the related executable with random name in the "emupdate" folder not - it is still there.
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 03:00:05 PM
Yes, I would have thought it would remain until such time as something changes in that executable, used for the actual installation of the emergency update.

This is the RunOnce path of the latest executable (yours will differ as the file names are unique):
SOFTWARE\AVAST\SETUP\EMUPDATE\3A0DABEE-441C-4AA0-AB94-A6718D5A47D3.EXE

Unfortunately it doesn't appear to clean house after these changes.
Currently I have another C:\Program Files\AVAST Software\Avast\Setup\emupdate\a3808000-e9de-4728-91cf-2733b10b662a.exe and another

There are also two sub-folders for two of the emupdate executables, neither of which match the latest emupdate executable in the emupdate sub-folder.

This may also be moot, as I haven't rebooted yet to see this after the emupdate, but I rather doubt it will remove the old sub-folders and or old emupdate executables.
Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on December 28, 2013, 03:43:30 PM
I just rebooted, and the RUN [every time] entry continues to show in my WinPatrol.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 28, 2013, 04:02:33 PM
I still have a 20131224 entry in my RunOnce key because I haven't rebooted since 8 days ago.

Avast isn't relying upon reboots now for regular updates, is it (i.e., de-emphasizing the "emergency" part)?  That would be wrong for people who don't regularly reboot.

Secondary question:  I hope things are not going to be screwed up by running an outdated emupdate executable after having received other updates the normal way?  This fear may not be founded because I do see that the date on the executable is 12/28 at 3:07 this morning, even though the entry has been there since the 24th.

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 28, 2013, 04:08:22 PM
There are also two sub-folders for two of the emupdate executables, neither of which match the latest emupdate executable in the emupdate sub-folder.

I manually removed that empty subfolder with random name a couple of weeks ago (I only had one of them).
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on December 28, 2013, 04:18:21 PM
I just rebooted, and the RUN [every time] entry continues to show in my WinPatrol.

I rebooted a few minutes ago but it didn't show an entry like yours does.
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 05:31:53 PM
I still have a 20131224 entry in my RunOnce key because I haven't rebooted since 8 days ago.

Avast isn't relying upon reboots now for regular updates, is it (i.e., de-emphasizing the "emergency" part)?  That would be wrong for people who don't regularly reboot.

I gave up on the old red herring (causing component damage) about not shutting down every day  a very long time ago. So no issue with it running on my system, but obviously if you have something running 24/7 then you are going to have to workout some action (periodic reboot) to cater for emupdate entry waiting to RunOnce.

Secondary question:  I hope things are not going to be screwed up by running an outdated emupdate executable after having received other updates the normal way?  This fear may not be founded because I do see that the date on the executable is 12/28 at 3:07 this morning, even though the entry has been there since the 24th.

My guess is this shouldn't cause an issue as the RunOnce registry entry should have the path to the latest emupdate executable in the emupdate sub-folder.
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 05:37:24 PM
There are also two sub-folders for two of the emupdate executables, neither of which match the latest emupdate executable in the emupdate sub-folder.

I manually removed that empty subfolder with random name a couple of weeks ago (I only had one of them).

Yes I too did some housekeeping after the emupdate around the November time related to the start of this topic, yet since then the new folders in setup have returned (as in my earlier image attachments). That said the sub-folders have x86 and x64 sub-folders, but they are all empty.

Clearly the creation process of the new emergency update executable isn't cleaning up the old folders/files. This is something that avast has to address.
Title: Re: Emergency Update 2013-11-21?
Post by: Harikrishnan on December 28, 2013, 05:48:52 PM
Today I received avast emergency update(32) and i have to configure my windows7 firewall control to allow the update. I have enabled 'avast emergency update' in widows7 firewall and also in win7 firewall control, but every time the update comes as a new one as update 30,31,32.. and i have to configure my firewall each time..why? and any solution....?
Title: Re: Emergency Update 2013-11-21?
Post by: Tetsuo on December 28, 2013, 08:17:03 PM
That said the sub-folders have x86 and x64 sub-folders, but they are all empty.

The folder I mentioned in my previous post had the same empty subfolders (Win XP). It has not returned since then, though.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 28, 2013, 08:48:20 PM
obviously if you have something running 24/7 then you are going to have to workout some action (periodic reboot) to cater for emupdate entry waiting to RunOnce.

I appreciate your comment, but just to be clear, are you saying there is a necessity to do this, or just that rebooting would clear out the RunOnce operation (which really goes without saying)?

I don't give a darn if there's a RunOnce operation pending if it's not actually necessary to keep Avast running in tip top shape.  It does not bother me.

However, if a regular reboot by design IS necessary, then the product needs to be redesigned, as there really are machines that are required for 24/7 operation, and Windows actually IS quite capable of running indefinitely between reboots.

Perhaps this is a fundamental difference between server and client versions of the product.  If that's the case I should like to know it.

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 08:57:22 PM
obviously if you have something running 24/7 then you are going to have to workout some action (periodic reboot) to cater for emupdate entry waiting to RunOnce.

I appreciate your comment, but just to be clear, are you saying there is a necessity to do this, or just that rebooting would clear out the RunOnce operation (which really goes without saying)?

I don't give a darn if there's a RunOnce operation pending if it's not actually necessary to keep Avast running in tip top shape.  It does not bother me.

However, if a regular reboot by design IS necessary, then the product needs to be redesigned, as there really are machines that are required for 24/7 operation, and Windows actually IS quite capable of running indefinitely between reboots.

Perhaps this is a fundamental difference between server and client versions of the product.  If that's the case I should like to know it.

I can't tell you if it is a necessity or not as I'm just an avast user like you - Lets put it this way, if you have a RunOnce entry for this it hasn't run.

By its nature emergency update, I would say it is necessary.

You will find many programs use the windows RunOnce function.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 28, 2013, 09:11:35 PM
Thanks, but I'm up to date on how Windows runs things.

And no, there are not a lot of things I normally do that result in RunOnce entries being created other than software installations initiated by me, which are infrequent.  I watch my system with Autoruns, among other methods.  I do not know of a program right now that expects the system to have to be rebooted in order to work properly.

I don't believe that the presence of an emergency updater implies anything other than Avast! is maintaining an opportunity to ensure its installation is safe and sound at startup.  The Avast UI implies it's completely up to date...

(http://Noel.ProDigitalSoftware.com/ForumPosts/AllUpToDate.png)

If it isn't actually up to date, despite the above, then the product has a problem.

Please don't speculate.  I can do that on my own.  :)

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on December 28, 2013, 09:23:20 PM
Yes, and you are doing a lot of speculation.

The fact that a program is up to date (program and virus definitions) really has no bearing on underlying functioning. That is why the emergency update was added so that elements could be fixed/updated with requiring the user to do a program update.

The fix for the web shield and downloads that effected some users was one such instance the emergency update was deployed, even though the program and virus definitions were up to date.

Your system your choice knock yourself out, I shan't waste any more time on it.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 28, 2013, 09:51:49 PM
I beg your pardon?  No posting I have made is speculation that can be construed as fact.  Telling people they are going to have to reboot their systems based on no more than a guess about how things work is, on the other hand...

As schmidthouse said, back on page 4:

Quote
I spend much time reading through the Threads and gleaning interesting facts and Fiction.
Speculation, yes I think there are unresolved questions that very few know the answers too.
 I also find that unsettling. ???

We have a 14 page thread here because people really would like knowledge to how it's supposed to work, so they can know how best to use the product and know whether there could be a problem on their systems.  I don't think we're asking for information that would compromise Avast's integrity.

Would someone who actually KNOWS how the product works care to comment on whether the UI claiming the product is up to date means it's REALLY REALLY up to date, or whether there are secret additional updates that are ONLY facilitated by the emergency updater?  No answer at all to this question would be a possibility, if no one knows...

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: jwoods301 on December 28, 2013, 10:02:54 PM
This description of Emergency Updater was posted in June 2012 (link provided by Lukas from Avast on the Feeedback site)...

http://www.ghacks.net/2012/06/30/avast-update-brings-emergency-updater-and-sitecorrect-features/ (http://www.ghacks.net/2012/06/30/avast-update-brings-emergency-updater-and-sitecorrect-features/)
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 28, 2013, 10:56:00 PM
Yes, and the program described in that article can be found scheduled via the Task Scheduler just as stated.  Notably on my system it is C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe, which is not at all the same executable that's set to run via the RunOnce key.

Consider this comparison:

(http://Noel.ProDigitalSoftware.com/ForumPosts/Differences.png)

The disparity in version numbering alone is unsettling.

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: jwoods301 on December 28, 2013, 11:30:56 PM
Beyond Compare...one of my favorite tools.

One thing that's interesting is that the .exe in the setup/emupdate folder on my system is being updated, the newest date was today. The registry key is also being updated.

So I'm wondering if AvastEmUpdate.exe is just a shell that calls the emupdate folder .exe...
Title: Re: Emergency Update 2013-11-21?
Post by: olddog on December 29, 2013, 12:09:25 AM
I am ever so glad I don't work for avast support.

There have been a number of "emergency updates" released. I have no idea how many. We know that each one has modified individual files, and that those files then show a change in their individual version number, but no change is made to the overall Avast version number.

It is not clear (at least to me), whether individual emergency updates contain all of the changes from the previous ones, or just apply a particular change.  If the latter is the case, then it would appear to be almost impossible to tell exactly what hybrid anyone is running at any specific time.

When someone takes the oft given advice to clean it all out and start again with a fresh install, are the patches or other changes made by one or more of these emergency updates already included in the product installation ion file that is current on the download site.

If avast are going to continue with a process that changes installations without providing any indication as to what level the installation is patched, then at the very least there should be a current web page which shows all individual files that have been changed with the proper file version references.
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 29, 2013, 01:12:04 AM
Quote
We know that each one has modified individual files, and that those files then show a change in their individual version number, but no change is made to the overall Avast version number.
Do you know whether the "up to date" status of Avast! overall is affected by the emergency updates?   In other words, per my post #202 above, could it be stating "Updated" and "Already up to date" when it really isn't?

I'm going to make a copy of my current Avast installation then reboot to run the staged GUID-named file, and see for myself.

I sincerely hope nothing ends up changed.

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 29, 2013, 01:35:57 AM
After the reboot the GUID-named RunOnce entry is missing, as you'd expect.  Thankfully, no changes are seen in the actual executables that make up the product.

There are a few differences in the files listed in the folder tree under AVAST Software, implying the GUID-named file DID run.  A Stats.ini file is different, a whole bunch of files in a subfolder named 13122401 (a superset of the name of the RunOnce entry) have disappeared, and a new and relatively small .bin file has appeared.

This seems like good news.  Though it's just one data point, it implies that regardless of whether the scheduled emergency update runs, the product is keeping itself up to date on a healthy system without regular reboots.

-Noel

Title: Re: Emergency Update 2013-11-21?
Post by: Harikrishnan on December 29, 2013, 04:18:40 AM
One more emergency update...it really annoying me to configure my firewall.... can someone help me..(still no vps update popup or sound)
(http://)
Title: Re: Emergency Update 2013-11-21?
Post by: Harikrishnan on December 29, 2013, 06:41:18 AM
Again.....oh..... :-[  (http://)
Title: Re: Emergency Update 2013-11-21?
Post by: AndreiRC on December 29, 2013, 08:55:44 AM
Emergency update popped up in the Setup folder last night, creating an 'emupdate' folder (didn't have one after freshly reinstalling Avast last week) ... There was no Start-up entry however for the emergency update.

I rebooted and everything seems normal. Still no Start-up entry after reboot, just the 'emupdate' folder present.
Title: Re: Emergency Update 2013-11-21?
Post by: chris.. on December 29, 2013, 11:19:50 AM
Hello,

Can there be a link with  annoying Christmas Ad ?

I have not checked the exact moment but it seems that since yesterday , I have no more this popup and no more xmas ".png" in Avast\RemoteCache Zip folder

May be a simple coincidence  ???
Title: Re: Emergency Update 2013-11-21?
Post by: Erwin1234 on December 29, 2013, 01:35:36 PM
Recently I switched from AVG to Avast on serveral computers because I did not like how AVG started to behave from update to update. Today I got two computers stuck on the "Avast emergency update", during login. Just a black screen and the normal user has to do a full reset. As an admin I can kill and restart a stuck explorer which solves the problem and also shows the avast emergency update running from "runonce".

My firewall (Comodo) will block new executables accessing the internet and ask for premission. But during login this is of course not possible because the user has not logged yet. Maybe this is related.

Why does avast use these strange and randomly named executables? What is their purpose?
Title: Re: Emergency Update 2013-11-21?
Post by: NoelC on December 29, 2013, 05:09:51 PM
Again.....oh..... :-[
Looks like it's the same version every time.

It's not doing that for everyone.  I had one - 20131224 - that ran once and hasn't returned since the reboot.

I suggest that perhaps something's gone wrong on your particular system.  As with so many other users lately, myself included, perhaps an uninstall, clean up (with Avastclear), and fresh reinstall will help clear that up.

Avastclear : http://files.avast.com/iavs9x/avastclear.exe

-Noel
Title: Re: Emergency Update 2013-11-21?
Post by: Ghostbeef on January 01, 2014, 05:47:25 PM
Recently I switched from AVG to Avast on serveral computers because I did not like how AVG started to behave from update to update. Today I got two computers stuck on the "Avast emergency update", during login. Just a black screen and the normal user has to do a full reset. As an admin I can kill and restart a stuck explorer which solves the problem and also shows the avast emergency update running from "runonce".

My firewall (Comodo) will block new executables accessing the internet and ask for premission. But during login this is of course not possible because the user has not logged yet. Maybe this is related.

Why does avast use these strange and randomly named executables? What is their purpose?
With the latest program update came a critical problem on my machine which seems to be related to the process detailed in this thread. I narrowed it down to a conflict between Avast! and the Zone Alarm firewall which caused my system to crash 100% of the time before a full login... I since uninstalled that firewall and tried with Windows 8 Firewall Control (Win XP version) and the emergency update process asks permission to access internet every single time I boot up my computer because the firewall considers the file a different program at each reboot. I have no idea how to get around that and I don't even know if the new firewall allows this process to even do its job, I'll give Avastclear a try just to be sure this isn't a wierd glitch.

Edit: No dice, the program still asks for permission every time. I hope this gets fixed at some point, it's iritating.
Title: Re: Emergency Update 2013-11-21?
Post by: hake on January 02, 2014, 02:52:30 PM
Although my experience with the functional behaviour of version 9 has been good, the random naming and frequency of emergency updates has been such a nuisance with the HIPS/firewall that I can no longer leave it in the hands of non-tech users.  It should not be that a security product undermines security.  I can achieve a settled configuration using AVG which does not confront users with bewildering surprises.

 :(
Title: Re: Emergency Update 2013-11-21?
Post by: CFalcon on February 15, 2014, 06:46:44 PM
I have same problem with this random .exe executed from the avast update,

If i let to pass this application with my firewall then the save as option in Firefox dont work anymore, and also all the bottons from the tool/setup from firefox that need to open a Examine....

Using a restore point from Windows and reinstalling firefox saving my profiles, i get again firefox working right, but if i let to work this emergency update process from Avast again firefox fails!

Any idea about this?

Title: Re: Emergency Update 2013-11-21?
Post by: ky331 on February 22, 2014, 01:02:48 AM
Here's some info on these so-called "emergency" updates... at least so far as they may pertain those still using avast 8:

The last version of avast 8 that I knowingly installed on my Win7 system was 8.0.1497, which was released on or about 2013-09-02.   It is the last fully-documented version of avast 8 released.

For quite a while, I had a RUN (as opposed to a run-ONCE) startup entry that repeatedly ran a 2013-11-21 emergency update every time I rebooted my system.   The RUN was never removed.  And that's what started this thread months ago.

Two months later, I eventually decided there was no point running it "forever", and so I manually stopped its auto-booting.

Finally today [2014-02-21], I received a new RUN-ONCE startup entry for a 2013-12-24 emergency update, which ran on the subsequent reboot.   The reboot took an exceptionally long time... perhaps while it was downloading/installing/updating the necessary files.

There was no formal indication of what was happening... but suffice it to say I now have a "newer" build of v8 --- 8.0.1504 --- on my system.   All I can determine about these newer builds is that each constitutes a "Support version for migration to AVAST 2014".   Doing a web search, I learned that apparently there have been several:

avast 8.0.1500 on 2013-10-15

avast 8.0.1501 on 2013-11-01

avast 8.0.1504 on 2013-12-19 (which I believe I only received today)

avast 8.0.1506 on 2014-01-27 (perhaps an indication of something yet to come?)

Note:   I am just reporting the facts of my experience.   Unless forced, I will upgrade to avast 2014 if and when I feel ready.   I know many people will say I should have long ago... but that's my decision... at least for the moment.   [In fact, the one time I tried, the installation refused to complete itself.]
For what it's worth, I do run avast 2014 on my Win XP system.

P.S.  I have intentionally set "Program Updates" to MANUAL... which is supposed to tell avast neither to check for program updates nor to automatically install them.   I find it ironic that so called "emergency updates" --- in this case, merely a "migratory preparation" --- can defy this setting.
Title: Re: Emergency Update 2013-11-21?
Post by: AndreiRC on February 25, 2014, 10:37:54 PM
So ... anyone care to explain what's with the avalanche of emergency updates?

I got one on Feb 21st ... one on Feb 24th (yesterday) ... and one on Feb 25th (tonight). 3 emergency updates in 5 days, that's rather big. Perhaps someone could tell us what fixes got applied with these updates.

Just as a note, I have gotten like 8 emergency updates in 2 months since I reinstalled Avast!. 2 in December, 3 in January and now 2 in February. Quite frequent ...
Title: Re: Emergency Update 2013-11-21?
Post by: digmor crusher on February 25, 2014, 11:44:44 PM
Scott's been barking quite a bit recently at these updates!!
Title: Re: Emergency Update 2013-11-21?
Post by: schmidthouse on February 26, 2014, 12:14:41 AM
I believe there were three Files on FEB 21 that Outpost Flagged,
Oddity since that update is now my "SafeZone" doesn't load.
Page stays light Blue. ::) :-\
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on February 26, 2014, 12:23:32 AM
So ... anyone care to explain what's with the avalanche of emergency updates?

I got one on Feb 21st ... one on Feb 24th (yesterday) ... and one on Feb 25th (tonight). 3 emergency updates in 5 days, that's rather big. Perhaps someone could tell us what fixes got applied with these updates.

Just as a note, I have gotten like 8 emergency updates in 2 months since I reinstalled Avast!. 2 in December, 3 in January and now 2 in February. Quite frequent ...

Would you rather have to perform a physical program update rather than using the AvastEmUpdate function for what may be a small update.
Title: Re: Emergency Update 2013-11-21?
Post by: AndreiRC on February 26, 2014, 05:32:25 AM

Would you rather have to perform a physical program update rather than using the AvastEmUpdate function for what may be a small update.

Definitely not. But I would still like to know what was fixed, since these updates are so frequent.



Also, I would like to know if I need to restart my system after each emergency update. My reboot still takes over 3 minutes and it's unpleasant to do this almost every day.
Title: Re: Emergency Update 2013-11-21?
Post by: cooby on February 26, 2014, 05:36:59 AM
I believe there were three Files on FEB 21 that Outpost Flagged,
Three today flagged here as well by my firewall, and some BugReport whatever that is
Title: Re: Emergency Update 2013-11-21?
Post by: hake on February 26, 2014, 10:21:30 AM
Seem to have had a lot of these in the last few days.  How does it help personal vigilance when it causes firewalls to falsely cry "Wolf!"

Since these are deposited into a folder which falls under the scope of Avast self-defence protection, wouldn't it be better to use fixed names and a reliance on digital signing?  I have to respond around nine times to my firewall's prompts for each emergency update.

Why all the sticking plaster anyway?
Title: Re: Emergency Update 2013-11-21?
Post by: GreggH on February 26, 2014, 02:52:17 PM
Would you rather have to perform a physical program update rather than using the AvastEmUpdate function for what may be a small update.

DavidR.... I would rather not, of course, however, I am also certain that not one of these "emergency" updates has been installed on my system, simply because they are all applied via a RunOnce in the registry and that does not happen unless the system is booted. Mine is on 24/7 and only rebooted as/when needed for a programme update or if I install something that requires it. Since nothing in Avast tells me that there are such "emergency" updates to be applied, I have no reason to reboot and thus, they are NOT applied. So much for an "emergency" update.

And then of course comes the question... if I reboot now, is only the most recent "emergency" update applied? If so, is it cumulative over those three updates? And if this is not the case, how "emergency" were they that Avast should risk them not being applied in this fashion. I am certain that I am not the only user who does not shut down his machine daily, or reboot it for no reason and who, therefore, may not have any such "emergency" updates applied and/or might miss some by only rebooting occasionally.

IOW, I would rather have to perform a physical programme update than NOT apply so-called "emergency" updates because I have no idea that in order to apply what I don't know is there, I have to restart my system to get it. Of course, this begs the question to Avast... are they truly "emergency" updates that should be applied right away (in case another comes down the pike tomorrow) or are they just a matter of convenience for Avast, to fix something in the programme without telling anyone that it needs be fixed or has been fixed.

And in case you are wondering, DavidR, I do NOT check the contents of that Avast EmUpdate folder on an hourly or even daily basis, to see if Avast has decided my programme needs an update in an "emergency" that isn't really an emergency.

Gregg
Title: Re: Emergency Update 2013-11-21?
Post by: thedarkness on April 30, 2014, 06:59:33 PM
I have been getting the 'emergency update' black screen upon boot also every once in a while also, for months now up to the latest version. I thought it might be a firewall issue at first (privatefirewall) but everything for avast was allowed through
Title: Re: Emergency Update 2013-11-21?
Post by: -midnight on April 30, 2014, 07:05:16 PM
I received an emergency update both yesterday and the day before and I hadn't restarted my computer prior to the 2 updates.
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on April 30, 2014, 08:37:23 PM
I have been getting the 'emergency update' black screen upon boot also every once in a while also, for months now up to the latest version. I thought it might be a firewall issue at first (privatefirewall) but everything for avast was allowed through

It is possibly more likely that the emergency update is in progress, but for some it isn't that quick. I had this happen for the first time on my win7 netbook (which isn't fast by any stretch of the imagination), black screen for ages.

If you get a black screen like this try using the old Ctrl+Alt+Del key combo and that will show you what is running in the background and give options. Once I saw that it was working and not dead, I left it to complete. I have never had this issue on my winXP system.


Ideally this shouldn't be piggybacked onto this old topic but another more recent one or its own new topic.
Title: Re: Emergency Update 2013-11-21?
Post by: iroc9555 on May 01, 2014, 12:12:42 AM
Hi DavidR.

Yes, this slow boot or black screen is affecting my Windows XP. With every new EMupdate it gets longer for the sys to completely be up and running. I have not seen this behavior in Win8 or Vista that I have at home though.

... using the old Ctrl+Alt+Del key combo and that will show you what is running in the background and give options. Once I saw that it was working and not dead, I left it to complete.


I shut it hard the first 2 times, time ago no with these recently EMupdates, but after watching the Task Manager at work, I let the sys to finnish what it is doing. Once it took about 10 mins to completely boot the sys ::)
Title: Re: Emergency Update 2013-11-21?
Post by: DavidR on May 01, 2014, 02:33:57 AM
Hi DavidR.

Yes, this slow boot or black screen is affecting my Windows XP. With every new EMupdate it gets longer for the sys to completely be up and running. I have not seen this behavior in Win8 or Vista that I have at home though.

... using the old Ctrl+Alt+Del key combo and that will show you what is running in the background and give options. Once I saw that it was working and not dead, I left it to complete.


I shut it hard the first 2 times, time ago no with these recently EMupdates, but after watching the Task Manager at work, I let the sys to finnish what it is doing. Once it took about 10 mins to completely boot the sys ::)

Yes the old three finger salute Ctrl+Alt+Del combo to access the Task Manager at least lets you know what is going on and that the system hasn't stalled/locked up. But if I remember rightly my MBAM Premium service (seen in task manager) might well have been running and using a lot of CPU time, I closed that just to help a little.

I have never had the black screen on my XP systems (only on my weak assed win7 netbook), plenty of grunt (RAM and CPU) on my XP system.
Title: Re: Emergency Update 2013-11-21?
Post by: thedarkness on May 03, 2014, 02:02:33 AM
On 7 at first I thought it might be due to a ram issue or low hdd space, however unlikely.  I am quite impatient when it comes to black screens and a mouse pointer, but 30+ seconds later would show no change. To solve the issue I would always start the the taskmgr and file>new task>'explorer' to gain access to windows. I would note after the desktop finally showed up, that it usually did not indicate that my main software for startup (antivirus/firewall etc) was running. A restart would usually solve the black screen. I think next time I receive a black screen I will leave it well alone to see if it progresses. The system is a 2006 laptop, 1.5 dual core, 2gig ram, but fast with 7-old but not old enough not to handle a simple antivirus update :)