Author Topic: AvastEmUpdate.exe  (Read 6285 times)

0 Members and 1 Guest are viewing this topic.

Offline colwarg

  • Jr. Member
  • **
  • Posts: 60
AvastEmUpdate.exe
« on: August 17, 2012, 03:28:17 AM »
Code: [Select]
The instruction at "0x77fa2f0c" referenced memory at "0x00000000". The memory could not be "written".
Click on OK to terminate the program
Click on CANCEL to debug the program

So, seeing as it's:
A) buggy
B) launched by some hidden setting as a scheduled task
C) leaves traces of it running
Code: [Select]
"avast! Emergency Update.job" (AvastEmUpdate.exe)
Started 8/16/2012 9:14:00 AM
"avast! Emergency Update.job" (AvastEmUpdate.exe)
Finished 8/16/2012 7:08:22 PM
Result: The task completed with an exit code of (0).

Can it be disabled?

Offline Spec8472

  • Avast team
  • Jr. Member
  • *
  • Posts: 50
Re: AvastEmUpdate.exe
« Reply #1 on: August 17, 2012, 08:28:04 AM »
Hi, can you specify Windows OS you are using? Also, are you blocking AvastEmUpdate.exe by any 3rd party security solution? The address of exception is in system DLL. You can remove sheduled task item in task scheduler if you need to.

Offline colwarg

  • Jr. Member
  • **
  • Posts: 60
Re: AvastEmUpdate.exe
« Reply #2 on: August 20, 2012, 07:57:44 AM »
Windows 2000
Sunbelt Firewall
There is no entries in my scheduled tasks for anything other then my overnight defrag jobs.

If the exception is from a system DLL, then it's due to the fact that the firewall is going to block the unknown until I permit it.

If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 65678
Re: AvastEmUpdate.exe
« Reply #3 on: August 20, 2012, 02:04:12 PM »
If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?
Good point. Hope the programmers imagine a solution...
The best things in life are free.

Offline Spec8472

  • Avast team
  • Jr. Member
  • *
  • Posts: 50
Re: AvastEmUpdate.exe
« Reply #4 on: August 21, 2012, 08:49:08 AM »
Hi,

thx for info.

You can also run "AvastEmUpdate.exe /unreg" for task unregistration. Yes exception is in ntdll.dll function RtlCaptureStackBackTrace. I am able to simulate problem now, so it will be fixed in next version.

Windows 2000
Sunbelt Firewall
There is no entries in my scheduled tasks for anything other then my overnight defrag jobs.

If the exception is from a system DLL, then it's due to the fact that the firewall is going to block the unknown until I permit it.

If Avast is launching the program when I'm not at the machine, how am I supposed to respond to the firewall popup?

Offline colwarg

  • Jr. Member
  • **
  • Posts: 60
Re: AvastEmUpdate.exe
« Reply #5 on: August 21, 2012, 11:23:36 PM »
I can delete that image now?  ???

Offline Skakara

  • Full Member
  • ***
  • Posts: 127
Re: AvastEmUpdate.exe
« Reply #6 on: August 22, 2012, 11:51:07 AM »
Here's some FYI's for you from another topic about Avast Emergency Updater (starting from this post and onwards):

You can't 1) delete 2) disable 3) change task settings of the emergency update. It's always reinstated back to how avast wants it to be (after program update). You can stop it by using an "application behavior blocking" software (my Sunbelt Personal Firewall has that) OR you can disable the Windows Task Scheduler (which I will do.. I'm already using a much much better task schduler (+using less memory), nnCron Lite (it has "missed tasks" feature, which Windows XP doesn't have)).

--------------------------------------------

If you're wondering why you're not seeing the "avast! Emergency Update" task in "Scheduled Tasks" folder, when some users report that they see it. It's a hidden task and some users might have a registry key (put by some other software) that makes it visible even if it's hidden. Notice that setting "show hidden files and folders" from explorer "folder options -> view" does NOT show hidden task files! Here's the registry key if you like to see hidden tasks in Scheduled Tasks folder (reboot needed):

Code: [Select]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent]
"ViewHiddenTasks"=dword:00000001