WSA AV kept on updating itself with the same version?

I encountered WSA AV kept on updating itself with the same version(v8.0.4.46) all over again, is there some kind of minor changes being roll out?

Was notified by my other security software Avira IS 2014 which flagged the WSA update file as performing suspicious action. The update file has a name of WRupdate757759.exe located in C:\Users\Username\AppData\Local\Temp.

 

I received the following this morning (at around 8 am local time):

WRupdate257290656.exe


I noticed afterward that the web shield or filtering extension was making browsing very, very slow over the next several minutes though it seems to have eased up some in the last few.

 

It must be and issue going on as the beta Joe replied there could something wrong on the back end. https://www.wilderssecurity.com/showpost.php?p=2330164&postcount=12

And this is normal WRupdatexxxxxxxxx.exe when WSA updates and if you use any HIPS or VS like I do the file remains as in most times WSA updates the file self deletes.

So it's best to wait for Joe to reply and let us know if it's because of the back end issue?

Thanks,

TH

EDIT: If it continues you can uncheck this temporary until Joe replies but make sure to recheck it after the issue is resolved.

 

If Avira flagged our update, that could cause the upgrade process to break. It may be worth unchecking automatic updates as TH has said. Could you then try manually updating and see what dialog/version number is shown?

Thanks!

 

this is odd i have avira on a couple machines along with webroot and avira has not flagged wsa at all nor the updates? could be a issue with avira.

 

Although avira flagged the WRupdate file it was allowed, nothing was block.

It could be something going on at webroot backend as what TH linked to your post(Can you confirm?) or is there a update for browsers filtering extension being roll out because my WSA AV is already at the latest version(V8.0.4.46).

Tried manually to check for wsa update but was shown that it has the newest version available.

It's from the HIPS module stating the WRupdate file is performing suspicious action.

 

yes but again i had nothing flagged at all