AvastEmUpdate question

[REDACTED]

Today when I booted my PC, WinPatrolPlus (Scotty) alerted me that 'AvastEmUpdate' service wanted to run.  I DID NOT allow it to run but went looking to see why this might be a new service.  It's located in the normal place... C:Program Files\Alwil Software\Avast5. Size is 247K.

I checked the file date of AvastEmUpdate.exe and see that it is today's date (9/9/2014).  Did Avast update this module today with definitions?  All other PC functions seem okay.

Will run Malwarebytes and full scan with avast.

Thanks for any help or info on this.

// edit to add file size. Also scan with avast says, "No Threat Found". //

[schmidthouse]

The  'AvastEmUpdate' is a legitimate service of Avast software and if you run a Forum Search there has been many topics/post regarding this service.
Have not read much recently, only when the service first appeared users noticed.
Others may add further specific info 

[REDACTED]

Thanks for the reply, but the date of the file is today's date so something has changed. I suspect maybe it was updated today but not sure.

[schmidthouse]

That's fine.
The service is used by Avast and can kick in at any given time
If Avast needs to update/modify something it uses this service.

[REDACTED]

So the date of that module can change?

Thanks.

[schmidthouse]

You're welcome.

[REDACTED]

Can the date change though?  I'm aware that malware often makes itself look to be legit and sometimes the only clue is that the date (or size) is different.

So was this module updated today?

Thanks.

[CraigB]

Yes the dates change with every update, Scotty has already confirmed it's legit

[bob3160]

There are updates daily. There may also be other changes that need to be made by avast!.
This is normal and something you need to allow. Nice to know that you're also using WinPatrol.

[REDACTED]

Thanks guys.  It's just that it was the first time I could remember where 'Scotty' said something about 'AvastEmUpdate" service wanting to run. I asked Scotty via the plus portion (WinPatrolPlus) about that module and it came back with that it was the first time any inquiry was made of it.  THAT made me suspicious.

Much obliged. Just trying to be careful.