unknown exe file with Online Armor

[Rob50]

Hi
can anyone help please, Online Armor keeps reporting, that an exe file wants to run at startup, and asks what to do, at the moment I have blocked them, ran a full scan with Avast and Malwarebytes, all clean, then ran CCleaner, another file popped up, and when I looked at its location in OA, there was an Avast folder there, so are the below files part of the Avast scans, I had set exclusions in OA for Avast, so not sure why it has started to pick up these files, if they are from Avast. I have not been able to get any info on these files from OA, so if you could point me in the right direction, It would be a great help

3d25f147-3f51-4f78-a7fa-09f39d0c91dc.exe, 0.0.0.0, (0.0.0.0)
C:\WINDOWS\Temp\3d25f147-3f51-4f78-a7fa-09f39d0c91dc.exe
Hash(MD5): C1B7BACC5F4A932870308FF2D2481F30


a0a37366-57e9-42b2-a034-22e27a3e5dde.exe, 0.0.0.0, (0.0.0.0)
C:\WINDOWS\Temp\a0a37366-57e9-42b2-a034-22e27a3e5dde.exe
Hash(MD5): C1B7BACC5F4A932870308FF2D2481F30


Thanks
Rob50
XP SP3

[Pondus]

Hash(MD5): C1B7BACC5F4A932870308FF2D2481F30
https://www.virustotal.com/file/dc637b86043fb8756cda1e8b7a7cec989cbdb4f57064ae5f0b07667f71f93697/analysis/

Sigcheck
signers..................: AVAST Software; VeriSign Class 3 Code Signing 2010 CA; VeriSign Class 3 Public Primary Certification Authority - G5
signing date.............: 12:46 AM 8/20/2012

First seen by VirusTotal
2012-08-20 11:57:22 UTC ( 2 uker, 3 dager ago )


not sure if the sigcheck is correct as it is located in a temp folder   


you may rescan that file at VirusTotal and see if the result has changed ...

[Asyn]

Guess this is an avast! emergency update.
Is AvastEmUpdate.exe allowed in OA..??

[Rob50]

Asyn - Pondus,

Thank you both for your replies, it's good, that it looks like they are Avast files, I was worried that they may have been a virus etc. Alwil software and all sub folders is listed in the exclusions folder of OA, these files don't pop up all the time, so the next time OA flags one, as long as it traces back to an location with an Avast folder, I will allow it to run, to see if it stops them being blocked.

Thanks again for all your help
Rob50

[Asyn]

You're welcome.