Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: DavidR on January 09, 2011, 02:23:58 AM
-
I don't know if anyone else has noticed this, but I no longer see the unp99999.tmp files displayed in the _avast5_ temp folder when browsing as they used to be.
I don't know if this was from the onset of 5.1 or from a specific build.
Is this by design or is avast now using another temp location for scanning http web content ?
-
It's still there for me...
-
It's still there for me...
Hey The tmp file in %TEMP% isn't in the _avast5_ folder for me. its just a empty folder.
-
It's still there for me...
The only thing in there now for me is the Webshlock.txt file now.
Whilst the web shield is active and the scan count for today is currently at 662, yet no copies of unp99999.tmp files in that folder.
I have the _avast5_ folder open and the web shield interface open and watched the web shield count increase and the last page scanned: field change, zero activity in the _avast5_ folder.
Edit: The same is happening on my other system, acer netbook, win7 starter, both systems are running 5.1.864.
-
Bump, any others finding (or not finding this) no unp99999.tmp files being extracted to the _avast5_ folder.
-
As I commented where you first mentioned it, I have nothing in the _avast5_ folder.
Even when I have a webshield alert open there is no tmp file (like there used to be)
Scott
-
If you can post the build number you are using and whatever OS, etc. To see if there is any common element, e.g. build number.
For me both XP Pro and win7 x86 Starter on 5.1.864.
-
Yep, sorry...
At the moment, I am on win7 64, avast! free 5.1.874
-
Bump, any others finding (or not finding this) no unp99999.tmp files being extracted to the _avast5_ folder.
I confirm this. No unp99999.tmp in _avast5_ (or elsewhere)...
asyn
-
Yep, sorry...
At the moment, I am on win7 64, avast! free 5.1.874
Good in one way as it doesn't appear to only be related to 5.1.864 or earlier builds, so it still needs to be fixed or certainly investigated.
Bad in that I don't know if Igor's comment means, the folder is there or that the unp99999.tmp activity is still there.
It's still there for me...
-
Bump, any others finding (or not finding this) no unp99999.tmp files being extracted to the _avast5_ folder.
I confirm this. No unp99999.tmp in _avast5_ (or elsewhere)...
asyn
Thanks,
I'm hoping this is some hiccup or oversight, rather than a change in policy to display them as they have proven invaluable for me in investigating supposed FPs/detections on sites reported in the forums.
-
What is the exact location of _avast5_ ???
I do not see any unp99999.tmp files on my systems. ???
-
What is the exact location of _avast5_ ???
The %TEMP% folder (put that into the address bar of explorer and it will open it)
-
Well, there was no "policy to display them" - it's simply how WebShield works, it needs those temporary files. If the internals of WebShield changed, then the files might be gone - but I'm not aware of any such changes, and those unp*.tmp files still flash for me in that folder when I'm browsing.
-
The %TEMP% folder (put that into the address bar of explorer and it will open it)
Still not visable for me.
-
Wrong folder, this should be the system TEMP, not the user's TEMP.
-
Wrong folder, this should be the system TEMP, not the user's TEMP.
How can I get to the system TEMP ???
-
Wrong folder, this should be the system TEMP, not the user's TEMP.
How can I get to the system TEMP ???
C:\Windows\Temp
-
Ahh...seems we were looking in the wrong place :D
The unp999.tmp files show up there for me.
C:\Windows\Temp\_avast5_\
-
Still no unp999.tmp files on both my systems. ???
-
Nothing for me either.
-
Got only that file too...
-
They appear and disappear as you browse...once the page loads they go. They stay if there is an open avast! alert (when on ask mode)
-
Well, there was no "policy to display them" - it's simply how WebShield works, it needs those temporary files. If the internals of WebShield changed, then the files might be gone - but I'm not aware of any such changes, and those unp*.tmp files still flash for me in that folder when I'm browsing.
They don't flash even for a millisecond when browsing.
-
Well, there was no "policy to display them" - it's simply how WebShield works, it needs those temporary files. If the internals of WebShield changed, then the files might be gone - but I'm not aware of any such changes, and those unp*.tmp files still flash for me in that folder when I'm browsing.
They don't flash even for a millisecond when browsing.
Yes. Even when in ask mode.
-
Well, there was no "policy to display them" - it's simply how WebShield works, it needs those temporary files. If the internals of WebShield changed, then the files might be gone - but I'm not aware of any such changes, and those unp*.tmp files still flash for me in that folder when I'm browsing.
They don't flash even for a millisecond when browsing.
Probably because explorer doesn't refresh enough...Try refreshing a few tabs at once and then refresh the explorer window
-
Ahh...seems we were looking in the wrong place :D
The unp999.tmp files show up there for me.
C:\Windows\Temp\_avast5_\
I haven't, that is where I have been monitoring, I use it so frequently I even have a shortcut for it.
I don't even get a flicker of the window and I rather doubt they would appear and disappear that quickly. Also when a web shield alert goes off, that unp file normally remained in the _avast5_ folder until you acknowledged the alert (my web shield settings are set to Ask) as it did previously.
Now I don't see that nor any indication that there are unp99999.tmp files created in that folder.
-
Well, what if you browse to an infected file?
-
<snip>
Probably because explorer doesn't refresh enough...Try refreshing a few tabs at once and then refresh the explorer window
My system hasn't changed at all, even with 10 tabs open and even using the Reload All Tabs has zero impact in the open c:\windows\temp\_avast5_ folder, no unp99999.tmp files displayed at all.
-
I haven't, that is where I have been monitoring, I use it so frequently I even have a shortcut for it.
I don't use it like you do, I forgot that it was there and not the user temp folder (where that folder is also, for some reason)
I don't even get a flicker of the window and I rather doubt they would appear and disappear that quickly. Also when a web shield alert goes off, that unp file normally remained in the _avast5_ folder until you acknowledged the alert (my web shield settings are set to Ask) as it did previously.
Now I don't see that nor any indication that there are unp99999.tmp files created in that folder.
Mine are on ask and I had an eicar alert open when I took that screenshot.
-
Well, what if you browse to an infected file?
Well that is how I first noticed this in the first place, checking out a site someone considered was giving a false positive detection. I usually use the firefox virustotal add on and send the unp99999.tmp file to VT for analysis. I also open it in notepad looking for suspect ,Script or <iframe tags. But the corresponding (or any) unp99999.tmp file wasn't present.
-
Well a test at the second eicar link to the eicar.com file alerts, but not an Ask but direct abort.
http://www.eicar.org/anti_virus_test_file.htm (http://www.eicar.org/anti_virus_test_file.htm)
Web Shield Test - http://www.eicar.org/download/eicar.com (http://www.eicar.org/download/eicar.com).
So I went checking my avast settings and I don't know why but my Web Shield is no longer set to Ask. So that would account for a lot of my issues. But I would have though I would still be seeing the unp99999.tmp files whilst normal browsing.
I have no idea why this setting was left at abort connection, I did a clean install after the beta but I went round the shields setting them to Ask, so I don't know if I missed this one or didn't OK my way out of the Expert Settings.
On changing the settings back to ask, I can see the offending unp99999.tmp file again, but during this not a single other unp file was displayed however shortly.