Author Topic: Can't delet Temp files  (Read 16215 times)

0 Members and 1 Guest are viewing this topic.

Offline jschinabeck

  • Newbie
  • *
  • Posts: 4
Can't delet Temp files
« on: May 11, 2005, 08:58:33 PM »
Have two 0 length temp files and avast folder that cannot be deleted in my C:\TEMP folder. Noted the following log:

05/06/2005 8:03:21 PM   Default   4294849355   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
05/06/2005 8:03:22 PM   Default   4294849355   An error has occured while attempting to update. Please check the logs. 
05/07/2005 2:21:40 AM   Default   4294849355   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
05/07/2005 2:21:41 AM   Default   4294849355   An error has occured while attempting to update. Please check the logs. 
05/07/2005 3:07:18 AM   Default   4278649643   Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7. 

How do I resolve this issue?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #1 on: May 11, 2005, 09:18:37 PM »
Which is your Windows? 98, Me, XP?
Do you use any other antivirus in your computer?

Can you try to repair your installation?
Go to Control Panel > Add/Remove programs > avast! antivirus > Remove
Then choose Repair function in the popup window (Repair).
You must be connected to the internet while repairing.

After booting, can you delete the files?
The best things in life are free.

Offline igor

  • Avast team
  • Serious Graphoman
  • *
  • Posts: 11791
    • AVAST Software
Re: Can't delet Temp files
« Reply #2 on: May 11, 2005, 09:26:10 PM »
There's nothing wrong about those 2 TEMP files - they are perfectly normal.

Offline jschinabeck

  • Newbie
  • *
  • Posts: 4
Re: Can't delet Temp files
« Reply #3 on: May 13, 2005, 03:50:15 PM »
Which is your Windows? 98, Me, XP?
Do you use any other antivirus in your computer?

Can you try to repair your installation?
Go to Control Panel > Add/Remove programs > avast! antivirus > Remove
Then choose Repair function in the popup window (Repair).
You must be connected to the internet while repairing.

After booting, can you delete the files?
I'm using Win98se. Just removed McAfee to switch to Avast. Hopefully all of McAfee is gone! Cannot delete files after reboot. Will try to repair and get back to you.

Thanks for response.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #4 on: May 13, 2005, 03:58:39 PM »
Will try to repair and get back to you.
Anyway, attempt to what Igor posted... that two files belong to the normal avast behavior... Don't care that much  8)
The best things in life are free.

Offline jschinabeck

  • Newbie
  • *
  • Posts: 4
Re: Can't delet Temp files
« Reply #5 on: May 14, 2005, 05:17:51 PM »
Tried to ‘Repair’ Avast. The process completed successfully within a few seconds. Does not seem there was enough time to ‘Repair’ the program … ??

After reboot these undeletable, 0 byte, temp files and Avast folder were present:

 Volume in drive C is QV14D0     
 Volume Serial Number is 2A31-1401

Directory of C:\WINDOWS\TEMP

.              <DIR>        06-09-99 12:35p .
..             <DIR>        06-09-99 12:35p ..
_AVAST4_       <DIR>        05-11-05  7:56a _avast4_
JETE209  TMP             0  05-13-05 10:31p JETE209.TMP
JETF970  TMP             0  05-13-05 10:31p JETF970.TMP
         2 file(s)              0 bytes

Directory of C:\WINDOWS\TEMP\_avast4_

.              <DIR>        05-11-05  7:56a .
..             <DIR>        05-11-05  7:56a ..
WEBSHL~1 TXT             0  05-13-05 10:30p Webshlock.txt
         1 file(s)              0 bytes

Total files listed:
         3 file(s)              0 bytes
         5 dir(s)   1,326,899,200 bytes free
Are these files characteristic of the Avast program? Will my temp folder always contain ‘Access is denied’ temp files and folders from Avast or is this some form of malfunction? The Avast folder is deleted each time I clean my Temp folder, but the result is another error when emptying the recycle bin.

Associated with the temp files is a ‘Warning’ log:
05/06/2005 8:03:21 PM   Default   4294849355   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
05/06/2005 8:03:22 PM   Default   4294849355   An error has occured while attempting to update. Please check the logs. 
05/07/2005 2:21:40 AM   Default   4294849355   Function setifaceUpdatePackages() has failed. Return code is 0x20000004, dwRes is 20000004. 
05/07/2005 2:21:41 AM   Default   4294849355   An error has occured while attempting to update. Please check the logs. 
05/07/2005 3:07:18 AM   Default   4278649643   Function setifaceUpdatePackages() has failed. Return code is 0x000004C7, dwRes is 000004C7. 

Based on my limited understanding of this log, it appears there is an install error. Is this true? How can I resolve this error? Seems the repair process did not clear the problem, but just added another entry into the warning log.

As you can tell, I have just started to use Avast after a very disagreeable experience with McAfee. I want to understand all the features of the free version of Avast and be assured it is set up correctly for full AV protection before moving up the the next level of your AV program.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #6 on: May 14, 2005, 09:35:48 PM »
Tried to ‘Repair’ Avast. The process completed successfully within a few seconds. Does not seem there was enough time to ‘Repair’ the program … ??
It could be fast, depends on how is your system state, the traffic on Internet, etc. Generally, less than 5 seconds if your installation is ok.

After reboot these undeletable, 0 byte, temp files and Avast folder were present:
JETE209  TMP             0  05-13-05 10:31p JETE209.TMP
JETF970  TMP             0  05-13-05 10:31p JETF970.TMP
WEBSHL~1 TXT             0  05-13-05 10:30p Webshlock.txt

The Jet files are related to Microsoft Jet drivers loaded by avast. It's ok. Don't worry. You can delete them because they're being used.
The last one belongs to WebShield provider. It's ok again.

Will my temp folder always contain ‘Access is denied’ temp files and folders from Avast or is this some form of malfunction? The Avast folder is deleted each time I clean my Temp folder, but the result is another error when emptying the recycle bin.
Let them there. They're legitimic. If you delete them you could mess avast behavior.

Based on my limited understanding of this log, it appears there is an install error. Is this true? How can I resolve this error? Seems the repair process did not clear the problem, but just added another entry into the warning log.
Verbose of the logs... Don't worry. The repair function passed over all of them. They promissed to remove these messages in next versions.

I want to understand all the features of the free version of Avast and be assured it is set up correctly for full AV protection before moving up the the next level of your AV program.
So, we're here to help you  8)
The best things in life are free.

Offline saronno

  • Newbie
  • *
  • Posts: 15
Re: Can't delet Temp files
« Reply #7 on: March 08, 2007, 01:25:17 PM »
Hi, I have a similar question about "temp/_avast_" directories.

Besides Avast I have installed also Spysweeper. Spysweeper alert me that some files in that directory are "rootkit suspicious". That should be pretty normal, in fact, I image that Avast driver loaded in the kernel probably hide these files and when spysweeper uses tipical techniques used to detect rootkit (raw disk access vs system call access) it finds an inconsistency and alert me.

However, I tried to empt the chest but these files remain there. So, I tried to use erd commander first to boot and remove drastically these files but nothing. So, this thing has begun to bother me.
Is there any way to removed definitly these files from my hard disk?

I have also another question. My administrator chest result empty after I empt it. Precedently it contained kernel32.dll winsock.dll e wsock32.dll. Now it's ok. But if I log on as a normal user they still compare in the chest. How come?

                                                                     
                                                                        Thanks in advance


Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #8 on: March 08, 2007, 01:47:34 PM »
I tried to empt the chest but these files remain there.
The Chest files are on <Avast4>\DATA\chest folder, so...

Is there any way to removed definitly these files from my hard disk?
avast needs that files to normal function.
Can't you exclude them from Spysweeper scanning?

I have also another question. My administrator chest result empty after I empt it. Precedently it contained kernel32.dll winsock.dll e wsock32.dll. Now it's ok. But if I log on as a normal user they still compare in the chest. How come?
These three files are there for backup purposes, what do you mean with 'still compare'?
If you remove these files they'll be there next time.
The best things in life are free.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 84765
  • No support PMs thanks
Re: Can't delet Temp files
« Reply #9 on: March 08, 2007, 02:06:39 PM »
The .....\Temp\_avast4_ folder is where avast unpacks archive files for scanning and on successful completion they are removed. These files begin with UNP with a numerical value after that.

There should be nothing to stop you removing files from that folder providing they aren't in use. Are you getting any errors ?

I can't see why avast would want to hide or protect these files, other than if it is scanning a suspect or infected archive file, when unpacked it could possibly be detected by another security program, which may cause conflict as both battle for control. Personally if I am going to run an on-demand scan I pause other resident scanners, one this stops duplicate scanning as one is opening a file to scan, so to does the other and avoids possible conflict if both programs recognise a malware infected file.
Windows 10 Home 2004 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.2.2455 (build 21.2.6096.648) UI 1.0.608/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline saronno

  • Newbie
  • *
  • Posts: 15
Re: Can't delet Temp files
« Reply #10 on: March 08, 2007, 02:17:36 PM »
avast needs that files to normal function.
Can't you exclude them from Spysweeper scanning?

yes, of course. I only needed to be assured that these files are not a problem. Now, I excluded them.

Quote
These three files are there for backup purposes, what do you mean with 'still compare'?
If you remove these files they'll be there next time.

I'm sorry, "appear", not "compare". However also in this case it is not a problem, so I should be clean. Thanks.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #11 on: March 08, 2007, 02:29:48 PM »
You're welcome, fell free to come back any time you need help.
Enjoy avast! 8)
The best things in life are free.

Offline saronno

  • Newbie
  • *
  • Posts: 15
Re: Can't delet Temp files
« Reply #12 on: March 08, 2007, 02:43:46 PM »
There should be nothing to stop you removing files from that folder providing they aren't in use. Are you getting any errors ?

I can't see why avast would want to hide or protect these files, other than if it is scanning a suspect or infected archive file, when unpacked it could possibly be detected by another security program, which may cause conflict as both battle for control. Personally if I am going to run an on-demand scan I pause other resident scanners, one this stops duplicate scanning as one is opening a file to scan, so to does the other and avoids possible conflict if both programs recognise a malware infected file.

I can't cancel them even if I boot with erd commander or other bart cd. Tipically I receive a pop up indicating that the path of these file are not found or things like that.
It seems that their structure has been modified so that other programs find inconsistencies related to normal file system structure. This is the reason I am worried. Things like that are tipical of rootkit or program like antivirus / antispyware / firewall loaded at boot time as kernel modules.

If it is avast that create these files so that they are undeletable, no problems. But if it was no avast .....

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Can't delet Temp files
« Reply #13 on: March 08, 2007, 06:50:17 PM »
It seems that their structure has been modified so that other programs find inconsistencies related to normal file system structure. This is the reason I am worried. Things like that are tipical of rootkit or program like antivirus / antispyware / firewall loaded at boot time as kernel modules.
I wish Alwil programmers drop a word about this... Can you explain a bit about the apparent rootkit behavior?
The best things in life are free.

Offline Spiritsongs

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1757
  • Ad-aware orientated Support forum(s)
Rootkit "detection"
« Reply #14 on: March 08, 2007, 08:10:03 PM »
 :)  Hi All :

     
     saronno : For Rootkit "detection", it is Best to use a specialized rootkit
                  detection program, such as the Good and FREE "RootkitRevealer"
                  at www.microsoft.com/technet/sysinternals/Security/RootkitRevealer.mspx
« Last Edit: March 08, 2007, 08:14:36 PM by Spiritsongs »
For the Best in what counts in Life :
www.tacf.org