Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Vlk on February 03, 2005, 11:06:14 AM
-
Hi guys,
we'd need a small favor from you. We're looking for the file names masks that your P2P programs are using when downloading files. I mean the names of the files before the download is complete.
For example, WinMX names incomplete files like __INCOMPLETE___original-filename.mp3
Kazaa AFAIK uses something like XXXXXXXX.dat where X's are some random numbers.
Etc etc...
Please report the name of the P2P app, and the filename mask.
We're looking to ways to enhance the P2P Shield and excluding those interim files from scanning is one way to greatly improve performance.
Thanks
Vlk
-
Bearshare - TMPoriginal-filename(1).tiger And TMPoriginal-filename.dat
It seems to use 2 files when downloading:
"TMPoriginal-filename(1).tiger" is a white file that looks corrupt.
"TMPoriginal-filename.dat" is the actual file (.mp3 etc).
--lee
-
Shareaza 2.1 stores its incomplete files here:
C:\Documents and Settings\User Name\Local Settings\Application Data\Shareaza\Incomplete by default
But this location can be changed by the user.
Shareaza puts some random characters in front of the actual file name. eg: XYTGJ3QZKMMGDUVD3AGEGRAVZHZDRF42 filename.ext
There is also an associated .SD file with the same filename. eg: XYTGJ3QZKMMGDUVD3AGEGRAVZHZDRF42 filename.ext.sd
-
I tried the following P2P porgies
eMule
makes several temp files during DL
00X.part
00X.part.met
00X.part.met.bak
In my test X varies from 1 to 3 my guess it will be higher when dl bigger files.
Azureus
Original file name
eXeem
Original file name
Hope this helps
-
LimeWire Pro:
Folder: C:\Documents and Settings\<username>\Incomplete
(Can be changed by user.)
Files:
1) T-4753890-<orig filename.extension>
2) T-4366419-<orig filename.extension>
Not sure how the names get generated... I will try to find it out :)
-
DC++ (DirectConnect): orignal filename
eMule mods use also other file extensions than .bak .met .part, probably depends on mod.
X.
-
In addition to my last post,
The random characters in front of the file name for incomplete Shareaza files is in fact that file's sha1 number.
-
eMule mods use also other file extensions than .bak .met .part, probably depends on mod.
But the actual temp file is only that with the '.part' extension. Every eMule uses these part-files. The other files (depending on what eMule-Mod you use) contain for example information about sources or settings for this file. These are usually small files.
-
DC++ Temp files: filename .dctmp
DC++ seems to use .dctmp, but also during download continuously updates target file. Maybe theat depends on some settings???
X.
-
Bearshare
In addition to Lee16's comment about Bearshare...
The active download files are in a TEMP directory; after download is finished they are moved to DOWNLOAD directory (I am sure you know this). :)
I agree with Lee that there are always two files while downloading.
I disagree only on one point with Lee, because in Explore\Bearshare\TEMP I see that the DAT file is between 1-5K and disappears when the download is complete; the actual file that is building is ONLY named the same as the posted share file with no .extension.
example:
NAME SIZE TYPE
POPULARPROGRAM FULL COPY 3k DAT FILE
POPULARPROGRAM FULL COPY 163,105 KB WinZip File
The TYPE can be termed Tiger, ZIP, DAT, WinRAR Archive, etc.
The "white file" Lee is referring to is the icon in front of the NAME. The data file has the white Windows system icon, while the program name can have a zip icon, rar icon, etc.
I hope that after posting my "organization" of the examples above stays organized, it may mess up after posting. Hopefully you can understand what I am talking about if it does...
Hope this helps...
-
Hello,
I use eMule Plus version 1o. eMule Plus assigns a number in ascending order, to each file as it is selected for download. It creates seven related files (but this can be changed in user preferences). If the assigned number is 17 the files look like:
017.part – file that hasn’t finished downloading
017.part.met – stores filename and tracks downloaded sections (data chunks) and custom priority settings
017.part.met.bak – back up of the previous file
017.part.settings – preview settings
017.part.stats – collects upload statistics for files still downloading
017.part.dir – saves customised destination directories
017.part.txtsrc – keeps track of most reliable file sources per use
-
Soulseek:
INCOMPLETE~filename.mp3
-
ARES:
___ARESTRA___original-filename.mp3
-
Bit Torrent:
standart path
C:\Torrent\temp
all files in this DIR are real neamed but incompled... there can be archive´s ord SubDIR
the finished files:
C:\Torrent\incoming
-
BitComet bittorrent client uses a .bc! filename extension for incomplete files.
[original-name].[original-extension].bc!
-
In Soulseek (http://www.slsknet.org/) an incomplete file look like this:
INCOMPLETE~originalname.ext
Cheers, Lito.
-
Maybe not just automatic detection of P2P destination / temporary directories for files and extensions, but also ability for customers to define additional ones (ie i use two Bittorrent programs and for both i got different temp / destination folders etc) ...
-
We have been putting your product onto home PCs for a while now and its excellent - items that p2p systems we find are popular are .bin and .rar files
-
i use winmx and it does all its files in the same folder but _INCOMPLETE in the file ;D well sometimes i use winMX
-
LimeWire (atleast version 4.8) uses T-[random numbers]-[original filename].[original extension]
-
eh... that is version 4.8 :)
-
rmDC++ (DirectConnect++), version0.403D[1]
link: http://rmdc.sweb.cz/
uses [original filename].[original extension].[random numbers].dctmp