So, what is this "em002_32_10.nup' d/l attempt

Discussion in 'ESET Smart Security' started by john smith, Jun 9, 2012.

Thread Status:
Not open for further replies.
  1. john smith

    john smith Registered Member

    Jun 14, 2003
    So, I see that my ESS 5 is trying to update its definitions. It fails, telling me in the log that the "update module" failed "allocating memory."

    I try updating again and notice it's downloading something called "em002_32_10.nup" which is some 37 MB in size.

    This seems weird so I abort and run a smart scan which finds

    Scan Log
    Version of virus signature database: 7207 (2012060:cool:
    Date: 6/9/2012 Time: 7:15:59 PM
    Scanned disks, folders and files: C:\MSOCache\All Users
    C:\MSOCache\All Users\{90140000-003D-0000-0000-0000000FF1CE}-C\ » CAB » FL_ITIRCL55_DLL_74435_____X86.3643236F_FC70_11D3_A536_0090278A1BB8 - a variant of Win32/Kryptik.AMQ trojan
    C:\MSOCache\All Users\{90140000-003D-0000-0000-0000000FF1CE}-C\ » CAB » RICHED20.DLL_0001 - a variant of Win32/Kryptik.AMQ trojan
    Number of scanned objects: 16880
    Number of threats found: 2
    Number of cleaned objects: 0
    Time of completion: 7:16:37 PM Total scanning time: 38 sec (00:00:3:cool:

    Okay, it hasn't cleaned these things, whatever they are; I restart the PC and rescan and find that they have disappeared from the MSOCache, and ESS 5 has just successfully updated to the latest database version 7208 as though nothing strange had happened.

    So, what's been going on here?

    John S.

    Operating System: Windows 7 Professional 64-bit (6.1, Build 7601) Service Pack 1 (7601.win7sp1_gdr.120330-1504)
    BIOS: BIOS Date: 02/24/10 12:23:42 Ver: 08.00.15
    Processor: Intel(R) Core(TM) i7 CPU 930 @ 2.80GHz (8 CPUs), ~2.8GHz
    Memory: 24576MB RAM
    Available OS Memory: 24568MB RAM
  2. Marcos

    Marcos Eset Staff Account

    Nov 22, 2002
    In case of such a large amount of RAM installed when you may get an error allocating memory, I'd suggest contacting Customer Care for a special version of the updater.
Thread Status:
Not open for further replies.