Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: miguelgrado on June 14, 2014, 10:48:16 AM
-
Since a few days (27-28 May), ago after an Emergency update, appeared on many pcs, a new process called unsecapp.exe running permanently.
This process is legitimate Windows, but never had been active constantly.
It is right and necessary for Avast or is an update error?
-
In my case unsecapp.exe is used by AdFender.I have that process running since I installed AdFender.
Did you install some similar app ?
-
The day that appeared do not install anything nor antess nor after.
I never had this active process
But many cases in forums have been reported and all have Avast and happened the same day
http://www.forospyware.com/t486677.html
http://forums.guru3d.com/showthread.php?t=389527
http://www.tomshardware.co.uk/answers/id-2154724/unsecapp-exe-process.html
-
Yes. I would also like to know. Since EmUpdate 5/27 was done, unsecapp.exe and wmiprvse.exe are showing in my Task Manager.
I understand that wmiprvse.exe is commonly running in systems like Win 7 and win 8, but not in a XP system. The only time I saw wmiprvse.exe running was after FF v. 27. It will run when opening FF 27 and no other browser or program.
unsecapp.exe was first detected by Winpatrol 5/27 the same date the EmUpdate was applied.
Any reason why avast! 9 needs these 2 files running which belong to WMI ?
another topic about it:
http://en.community.dell.com/support-forums/virus-spyware/f/3522/t/19586212.aspx
-
Neither of those are running on my XP Pro system, but both are in the task manager listing on my win7 system.
-
David,
On your XP, have you checked "Show processes from all users"?
-
David,
On your XP, have you checked "Show processes from all users"?
That is my setup for task manager.
-
Neither of those are running on my XP Pro system...
Confirmed.
-
Neither of those are running on my XP Pro system...
Confirmed.
Wierd. It/they must be related to another program and avast! working together in our systems since uninstalling avast! remove them from Task Manager.
-
I've to (partly) correct myself, wmiprvse.exe is in fact running (for a short time) after a reboot.
-
I have something very clear.That day do not install anything new and any updates, except the emergency update of Avast.
The process began about 10 minutes later, according to System Explorer.
Also in one of the links that I put on, a user with several pcs, to uninstall Avast, the process appeared not more and returned to install and restart the pc, the process was again there.
-
The cpu load from WmiPrvSE will disappear after you restart
Windows Management Instrumentation Service.
http://www.makeuseof.com/answers/what-is-wmiprvse-exe-and-why-is-it-causing-high-cpu-usage/
-
Hello,
I'm the person who wrote in reply#11 on the guru3d website about having noticed unsecapp.exe starting on 2 of my pc's but not starting up on my laptop nor my friends pc and both of those have avast as well.
Well a couple days after posting that I started up my laptop again and what do you know? unsecapp.exe appears in startup and I was talking to my friend again and he said his avast! wasn't the most latest version so I asked if he could update it for me to test it out, he said sure and guess what? He also has unsecapp.exe starting on his windows 8 pc after restarting when before when I asked he didn't.
Now it's been about 20 days since this has appeared on my pcs and it's still here, I'm not sure about you guys but I'd really like to know why avast! needs to have this startup all of a sudden (and yes before anyone says otherwise I can confirm it has to do with avast! and something about it's most up-to-date version).
-
Wow. I also have this running on my win 7. And It is indeed started not so long ago as you have said. I have no idea this could related to Avast or not though, but the symptom in mine and yours are quite similar.
-
Hello again,
Today I decided to try a refresh(reformat I guess) of my Windows 7 pc and when everything was finished I checked task manager since there was almost nothing installed again, no unsecapp.exe at all. So I restarted the pc before I went to download google chrome/avast!/malwarebytes etc..etc.. and still no unsecapp.exe starting.
Before installing anything I went to download avast! first, installed it and let it do it's first setup quick-scan and then when that finished I checked if it was all up-to-date and such it was. Looked at task manger, nothing just the normal stuff didn't see unsecapp.exe, but again after I restarted with the only program I installed being avast! there it was, unsecapp.exe in task manger.
Again, I'm not at all worried about this program starting or anything since we know it's legit it's just why does avast! need this to start in these past few weeks? Since unless I'm wrong this program only starts when there's incompatibility detected with a program on windows so it starts to make it more 'stable'?
I guess an easy solution would be to move on from avast! to some other anti-virus but I don't really want to do that since I've been using avast for literally years. But this is getting pretty nuts that this hasn't been adressed yet. (I could contact support again about it, but last time was brutal it took a few days and I felt like I got an automated message telling me to discuss it on the forums that were down lol...)
Also on there twitter someone asked why unsecapp.exe is needed by avast! lately and the person responded saying "We'll ask our support team and get back to you" now that was a couple days ago so if they decide to get back to him why I don't know, I don't have the link to the discussion on there twitter but it was on the 14th if you want to check yourself.
-
The Unsecapp.exe application is used in the communication of two computers and this program starts automatically in Windows vista. The Unsecapp.exe application is used to send results back to a client in a process that may not have permissions to be a DCOM service. Both scripting and the Microsoft .NET System Management namespace rely on the Unsecapp.exe application to receive the results of asynchronous operations.
Does this help.. From MS
to receive asynchronous callbacks for WMI client application running in different processes. WMI, Windows Management Instrumentation, enables software developers to write scripts and programs for the management or querying of devices, user accounts, Windows services, running programs, networking, and many other internal technical aspects of Windows - in other words the sort of work TUT does (for example : TUT, The Ultimate Troubleshooter, uses WMI to retrieve all the information that it shows on the System Info tab).
-
Never had seen this before EVER until about two weeks ago. Now it seems to think it's my best friend in task manager along with wmiprvse.exe. First time I saw unsecapp.exe, I thought it was a hacker joke...you know unsecure app as in Windows is unsecureable. C'mon avast play straight with us. What's going on here? What can avast do now that it's using unsecapp.exe that it wasn't doing before?
I want to hear from the avast development team about this. It seems pretty clear that avast is suddenly tying into Windows using unsecapp.exe, and I think it's fair for PC users to be concerned and want to know why.
-
I don't see problem, as the Pc operated correctly and if Avast needs of that process, so perfect.
We need to confirm is if it has to be so, or is an error
-
Neither process is evident on win8.1.1
-
http://forums.guru3d.com/showthread.php?t=389527
I am one of the poster in the above thread. I have now done this test on 5 win7 systems, ALL with AVAST the few that didnt have this unsecapp.exe running started have it running once I update to the most recent version of AVAST as the few that did have the process running where running 5+ months old versions of the avast. but once updated ALL started running this unsecapp.exe
I have since took owner ship of this unsecapp.exe and renamed to KEEP it from running on my personal PC. As it was never needed untill what ever AVAST had changed. And i know what is used for and there no PROGRAM on my that uses it.
Untill this has been remedied by avast I Will keep that program renamed to keep it from running. Cause Avast does it need it to to run and if I remove AVAST from all my PC i tested this on unsecapp.exe no longer runs.
One of these system i test on was FRESH install of win7 followed by Avast being installed followed by ever reboot after install runs this program.
-
Renaming it, prevents other legitimate processes from using it.
-
The Unsecapp.exe application is used in the communication of two computers and this program starts automatically in Windows vista. The Unsecapp.exe application is used to send results back to a client in a process that may not have permissions to be a DCOM service. Both scripting and the Microsoft .NET System Management namespace rely on the Unsecapp.exe application to receive the results of asynchronous operations.
This process also runs WMI and should not be disabled
-
Renaming it, prevents other legitimate processes from using it.
It's a legitimate MS Windows process. See attached below (Win 7 Home Premium 64-bit):
-
Renaming it, prevents other legitimate processes from using it.
It's a legitimate MS Windows process. See attached below (Win 7 Home Premium 64-bit):
I am perfectly aware of what it is for as I stated THERE IS NO program or process that HAS EVER used unsecapp.exe ever on my PC in 5 years i had this build NOT ONE nor has there every been.
( i watch taskmanger to see what is running and what should not be there) unsecapp.exe is one them that was never there never ran in 5+years i had this build, Last time i saw this running on pc was when I was XP.
Till what ever AVAST change to cause it nor has AVAST in the 5+ years I BEEN USING never needed it. IT may be legite but also security risk as to what the program allows.
IF it was need by something on my PC and it couldnt run I would get ton errors in event viewer regarding it which i do not. and if AVAST need it which does not it would most defiently be have entries in the the event viewer, which again it does not.
Cause I renamed the exe over 2 weeks ago. and there no issues no events in event viewer
-
What's sad on this forum is that there's no-one from Avast that seems to be monitoring what's going on. Not one response from anyone from Avast. Which really makes the whole forum process a bit of a joke. Ironic that today I've had an email from them asking me to log in as their forum is now safe to use again - they say "The forum is an extremely important part of our business" - yeah right, pull the other one!
-
Like miguelgrado and ky331 I do not have any problem with unsecapp.exe and wmiprvse.exe running in my system. As essexboy stated or quoted, both are used for the comunication between computers by WMI so I am inclined to belive that SU, BC, or some new setting is avast! is using them. However, since DavidR and Asyn appear not to have any of these files since the last EmUpdate, it all depends which avast! tool or configuration they have active in their systems.
I have Software Updater, BrowserClenup, Remote Assistance, MailShield, and COMMUNITY active. Also I do not run DeepScreen but Hardened Mode set to agressive.
-
According to one of the users,it looks like unsecapp.exe is connected with Browser Cleanup Tool.
In his/her case unsecapp.exe is gone after BCT uninstallation.
I didn't notice the difference since I have that process running since I installed AdFender.
-
win xp home sp3 here, Avast! free and outpost firewall.
Please can anyone say what Avast! process causes unsecapp.exe to start lately?
I don't really need some of the Avast! extras like browser cleanup, grime fighter, etc, so if unsecapp is called by one of those I will just turn that off.
Thanks in advance for any feedback. :)
Fwiw:
unsecapp runs here until it is stopped manually.
unsecapp can be stopped using process explorer, and does not restart until the computer is restarted.
I have renamed it to unsecapp._xe so it won't start.
wmiprvse.exe still starts like it always did, so that is not affected by the absence of unsecapp.
All other apps and processes seem to still work, but more time is needed to be sure.
-
Please can anyone say what Avast! process causes unsecapp.exe to start lately?
See: Reply #26
-
Thanks, Asyn. Saw that.
Just wondered what OS the referenced member uses.
Also, I just ran the browser cleanup tool manually and it gave the same result as always (1 untrustworthy add on).
It did not cause unsecapp.exe to start (it can't start, it has been renamed).
If Avast! is indeed the cause for unsecapp starting I wouldn't worry about it much, but I would like to confirm it.
I will do that here and report back, just not sure how to confirm it.
Can I accomplish "BCT uninstallation" by simply unticking the box in Tools?
-
Can I accomplish "BCT uninstallation" by simply unticking the box in Tools?
Yes.
1. Control Panel -> Add/Remove programs -> avast! -> change/uninstall
2. Click on 'Change'.
3. Untick BCT and click OK.
4. Reboot.
-
OK, will do that & post results.
Might be approx. 16 hours before I can get to it.
-
Its true here on win xp.
Unsecapp.exe no longer runs at startup when:
- when unsecapp.exe is named correctly, and
- Browser Cleanup Tool is turned off as shown in post #30.
Thanks. :)
-
You're welcome.
-
According to one of the users,it looks like unsecapp.exe is connected with Browser Cleanup Tool.
In his/her case unsecapp.exe is gone after BCT uninstallation.
I didn't notice the difference since I have that process running since I installed AdFender.
Wow I always had that install on all PC that have Avast and it never triggered unsecapp.exe till recently, but removing ( not like i ever used it) seem to stop unsecapp from running..
Hot damn i an put the program i can un rename unsecapp now.
Kudos yo you for fiqure this out
-
It seems to be used by Avast! , look at this :
http://www.tomshardware.co.uk/answers/id-2154724/unsecapp-exe-process.html
-
I have a scheduled job that tallies up the names of all running processes every night. I've had this set up for a very long time.
First time I saw unsecapp.exe was June 18, 2013 (that was on Win 7 x64). Most recent time I saw unsecapp.exe run was June 30, 2014 (I switched to Win 8.1 in October, 2013).
Before that I saw it only intermittently, about once a month or a bit less. For example, these are the dates since the start of 2014...
TaskList_2013_06_18_02_30_00.log: "unsecapp.exe", Process ID 3392
TaskList_2013_08_11_02_30_00.log: "unsecapp.exe", Process ID 8112
TaskList_2013_08_12_02_30_00.log: "unsecapp.exe", Process ID 8112
TaskList_2013_08_13_02_30_00.log: "unsecapp.exe", Process ID 8112
TaskList_2013_08_14_02_30_00.log: "unsecapp.exe", Process ID 8112
TaskList_2013_08_15_02_30_00.log: "unsecapp.exe", Process ID 8112
TaskList_2013_08_27_02_30_00.log: "unsecapp.exe", Process ID 30268
TaskList_2013_08_28_02_30_00.log: "unsecapp.exe", Process ID 30268
TaskList_2013_08_29_02_30_00.log: "unsecapp.exe", Process ID 30268
TaskList_2013_08_30_02_30_00.log: "unsecapp.exe", Process ID 30268
TaskList_2013_09_10_02_30_00.log: "unsecapp.exe", Process ID 6312
TaskList_2013_09_22_02_30_00.log: "unsecapp.exe", Process ID 9764
TaskList_2013_09_23_02_30_00.log: "unsecapp.exe", Process ID 9764
TaskList_2013_09_24_02_30_00.log: "unsecapp.exe", Process ID 9764
TaskList_2013_09_27_02_30_00.log: "unsecapp.exe", Process ID 4984
TaskList_2013_09_28_02_30_00.log: "unsecapp.exe", Process ID 4984
TaskList_2013_09_29_02_30_00.log: "unsecapp.exe", Process ID 4984
TaskList_2013_09_30_02_30_00.log: "unsecapp.exe", Process ID 4984
TaskList_2013_10_31_02_30_01.log: "unsecapp.exe", Process ID 4236
TaskList_2013_11_01_02_30_00.log: "unsecapp.exe", Process ID 4236
TaskList_2013_12_13_03_00_02.log: "unsecapp.exe", Process ID 11888
TaskList_2014_02_08_03_00_59.log: "unsecapp.exe", Process ID 5452
TaskList_2014_02_27_03_00_02.log: "unsecapp.exe", Process ID 17520
TaskList_2014_04_25_04_00_02.log: "unsecapp.exe", Process ID 8072
TaskList_2014_05_07_04_00_01.log: "unsecapp.exe", Process ID 1688
TaskList_2014_06_30_04_00_02.log: "unsecapp.exe", Process ID 8600
Based on the above evidence, I'd say it's started only occasionally, and may be persistent (noting multiple entries for subsequent days with the same process ID). I don't boot up very often.
Edit: I have NEVER run the Avast Browser Cleanup Tool.
-Noel
-
Can I accomplish "BCT uninstallation" by simply unticking the box in Tools?
Yes.
1. Control Panel -> Add/Remove programs -> avast! -> change/uninstall
2. Click on 'Change'.
3. Untick BCT and click OK.
4. Reboot.
Thanks
I unticked BCF & Grime. Now I don't have either unsecapp.exe or wmiprvse.exe running.
I use Win XP SP3.
-
You're welcome.
-
I have recently noticed in my task mgr the same process (unsecapp.exe) which I never had before. What's more confusing is that I do not have Avast on my PC and never have. What I have noticed is since that started, I have had a 10 fold increase in MalwarebytesPro blocking incoming incoming spam and malware. There is one last question is how did it get onto my PC without me downloading anything? I would like to get rid of this junk asap. OS --- WinXP Home 2003 SP3, MSE and MalwarebytesPRO (virus and mw protection) Windows Firewall enabled.
-
I have recently noticed in my task mgr the same process (unsecapp.exe) which I never had before. What's more confusing is that I do not have Avast on my PC and never have. What I have noticed is since that started, I have had a 10 fold increase in MalwarebytesPro blocking incoming incoming spam and malware. There is one last question is how did it get onto my PC without me downloading anything? I would like to get rid of this junk asap. OS --- WinXP Home 2003 SP3, MSE and MalwarebytesPRO (virus and mw protection) Windows Firewall enabled.
Avast isn't the only program that uses this executable, as is pointed out in this topic, see Reply #3 and Reply #21.
-
I don't understand? Those are in reference to Win Vista, 7, FF v27 and also have Avast installed. I don't have any of those. I just don't understand how that got on here. I did a windows search and it came up empty; that's why I'm baffled.
-
I have recently noticed in my task mgr the same process (unsecapp.exe) which I never had before. What's more confusing is that I do not have Avast on my PC and never have....
Does this help: https://forum.avast.com/index.php?topic=150673.msg1096068#msg1096068
If you want your system checked out follow this guide: http://forum.avast.com/index.php?topic=53253.0
Open a new topic and attach ( Do not copy/paste ) logs for Malwarebytes', Farbar Recovery Scan Tool, and aswMBR.exe here:
http://forum.avast.com/index.php?board=4.0
Where an expert in removal of malware will help you. Notice. I am not implying your sys is infected just that an expert will take a look at it and determine other things like why you have unsecapp in your sys.
-
Thanks for reading thru my frustration. I'll check into those. Hopefully I can get this figured out.
-
Windows 7 x64
Got unsecapp.exe to stop loading by doing what Asyn says here
1. Control Panel -> Add/Remove programs -> avast! -> change/uninstall
2. Click on 'Change'.
3. Untick BCT and click OK.
4. Reboot.
And also remove grime fighter or whatever,
FYI
The reason I don't want it running is due to the fact that another active process running that does nothing for me AND it takes cycles away from other things i have running.
-
I picked up unsecapp.exe from the pirate.bay when they insisted I install VLC media player. I thought it was from the Pornhub (sillyme). Then omnisearch or somesuch occured to hijack my browser search engine. I got rid of omnisearch by removing the erroneous appendage to the application run line in the browsers executable properties. Of course if you remove unsecapp in task manager it turns in wermgr.exe. They both hijack inheritable permissions so that you cannot delete them. I figure that both unsecapp and wermgr are trojan horse style worm viruses applying a damaging remote connection type rootkit to your computer that is aimed at spying on your bank details etc etc etc. Probably my fault for going to the pirate bay and the pornhub but essentially they should be marked as viruses and targeted for removal somehow. Best to add them to the virus database.....
-
Hi noonanaaron. Welcome to Avast forum.
Unsecapp.exe is not a trojan or hijacker. It is a valid Microsoft file.
https://forum.avast.com/index.php?topic=150673.msg1096068#msg1096068
Unsecapp.exe is needed by Avast Browser Clean up Tool. If you do not want it in your system, you must uninstall BCT: https://forum.avast.com/index.php?topic=150673.msg1098606#msg1098606
Wermgr.exe is also a valid Microsoft file if located in Windows\System32 folder. It is also known as Windows Problem Reporting.
According to WinPatrol:
When an application crashes, it still executes an unhandled exception handler, but that handler sends a message to the WER service (wersvc.dll) and the service launches the WER Fault Reporting process (Werfault.exe) to display the error reporting dialog.
What you say here:
... Of course if you remove unsecapp in task manager it turns in wermgr.exe...
It is only wermgr.exe reporting that unsecapp.exe crashed or it is no longer running.
Now, if you really want to make sure those files are clean you can send them to VirusTotal (https://www.virustotal.com/) to be analyzed by 40 or more different antivirus products and scan engines.