Avast WEBforum

Other => Viruses and worms => Topic started by: whoopla13 on August 07, 2009, 04:30:14 PM

Title: Adware.Adsponsor
Post by: whoopla13 on August 07, 2009, 04:30:14 PM: 8/7/2009 10:12:16 PM:116
IntelliGuard: System Event Blocked
Threat Name - Adware.Adsponsor
Details - Spyware Doctor has blocked an application attempting to access a file.
Risk Level - Low
Infection - C:\WINDOWS\TEMP\_AVAST4_\UNP80904531.TMP

I have contacted pctools as well. I want to know what this file is cause I chose to block it and it pops up a lot.

I have reinstalled AVAST and this still came up. Any ideas?

AVAST 4.8 (4.8.1335)
Title: Re: Adware.Adsponsor
Post by: Lisandro on August 07, 2009, 05:12:02 PM: Spyware Doctor is taking an avast temporary file as a false positive.
If you block it into Spyware Doctor, avast won't work correctly.
Maybe add a Spyware Doctor exclusion to that folder.
Title: Re: Adware.Adsponsor
Post by: DavidR on August 07, 2009, 05:57:12 PM: I would suggest that until pctools correct this incorrect interaction you exclude the _avast4_ folder in spyware doctor. You could co further and exclude just the files in that folder beginning with UNP and ending in .tmp if it allows the use of wild cards.

avast unpacks archive files and other temporary content (web shield scanning) that it is to scan to that folder so it is rightly going to access them.
Title: Re: Adware.Adsponsor
Post by: whoopla13 on August 08, 2009, 08:48:27 AM: I guess it's safe? I have nothing to worry about?

I checked the _avast4_ folder and all I saw is Webshlock, a text document. Is it suppose to be there?
Title: Re: Adware.Adsponsor
Post by: Lisandro on August 08, 2009, 01:57:24 PM: Quote from: whoopla13 on August 08, 2009, 08:48:27 AM
I checked the _avast4_ folder and all I saw is Webshlock, a text document. Is it suppose to be there?
Yes. It's used by WebShield of avast.
Title: Re: Adware.Adsponsor
Post by: DavidR on August 08, 2009, 04:29:59 PM: Quote from: whoopla13 on August 08, 2009, 08:48:27 AM
I guess it's safe? I have nothing to worry about?

I checked the _avast4_ folder and all I saw is Webshlock, a text document. Is it suppose to be there?

No guess needed, it is safe, the unp9999999.tmp files once scanned by avast are deleted if found to be clean.

It is the spyware doctor locking that file that a) prevented avast from doing that and b) could also prevent avast from scanning it as it locks the file. So you really have to exclude that folder in spyware doctor to avoid possible conflict.

The Webshlock.txt is as Tech used by the web shield, it is also a protected file.

Welcome to the forums.
Title: Re: Adware.Adsponsor
Post by: silvertones on September 06, 2009, 01:56:22 PM: PC Tools still have not fixed this. SD won't let you exclude a folder. It won't let you use wild cards.
Title: Re: Adware.Adsponsor
Post by: DavidR on September 06, 2009, 03:22:02 PM: Then you have to take that up with PC Tools, SD.

Surely if it has any form of exclusion it would use the common windows explored style navigation window. Perhaps that will allow for folder selection without the need for wildcards.
Title: Re: Adware.Adsponsor
Post by: silvertones on September 07, 2009, 01:33:12 PM: well it does use the standard explorer configuration but it makes you go all the way to the file level. The files in the avast temp folder continually change so that's no help. PCTools have had this on their plate for a long time now. I was the first to report it. It's in the hands of the developers, they acknowledge the issue but can't seem to fix it. So they say.
Title: Re: Adware.Adsponsor
Post by: silvertones on September 07, 2009, 01:37:39 PM: anyone using SD under the file guard change from "processes & scripts" to "Processes only" with the drop down.