I contacted Bill at Winpatrol about emergency updates. He is looking into it . If necessary he will change code . Meanwhile if you have the Plus edition there is a workaround:

“if you are a PLUS member, there is a workaround on our options page. Click the button that says “Hide Alert Messages” and you’ll see we have a checkbox allowing users to ignore any RunOnce entries since their typically used for updates. Any malware attacks will show up in more than that one location”.