Solved GoogleUpdate.exe killed by avast and DEP

[maccaquacker]

Hey guys,

About a week ago avast detected a hidden rootkit in googleupdate.exe and auto-deleted it. Now, every 15 minutes or so my computer says googleupdate.exe has crashed, windows is checking for a solution to the problem. It then says the program has been closed. I press OK and a little bubble appears in the taskbar saying it was closed by Data Execution Prevention.

Is there any way to stop this happening without completely reinstalling all my google products?

 

[richc46]

This may be of some help.
How To Remove Background Process GoogleUpdate.exe From The System » My Digital Life

 

[maccaquacker]

Hmm, well ideally id like to still be able to update the applications but am I right in saying this happens automatically when they are opened?

 

[richc46]

You can try to disable the service
GoogleUpdate.exe
I dont think that the appl are updated automatically when you open them.

 

[maccaquacker]

Hmm, looks like complete uninstall is the only way to fix this unless there is an installer package with just this service (reinstalling the google updater package (the UI end) does not repair it)

 

[richc46]

Read next to last sentence
The Invisible GoogleUpdate.exe

To make things even more difficult for those who manually remove the updater, "you may find that your Google programs no longer function properly and, in many cases, you may see GoogleUpdate return automatically".

 

[maccaquacker]

I know its a long shot but is there a chance that if someone else was to send me a zip of all the files in the updater directory of googles program files folder it would be to work again as avast would only have deleted the file it found infected, not others or registry keys wouldn't it?

 

[richc46]

I would send it to you except I dont have it. You have to be careful, if someone sends you that zip, you really dont know what you are getting besides the upadater. Why not take a chance, uninstall and maybe it will be installed again, as the article says.

 

[richc46]

http://www.vistax64.com/tutorials/120778-dep-enable-disable-13.html#post1314996

 

[maccaquacker]

Have waited a day, and yes, the article seems to have proved correct, which is good. It seems to have re-enabled itsself and picasa was updated fine when I ran it today

thanks for all your help.

macca

 

[richc46]

Thats great news, glad to be of help.