Author Topic: Avast snapshots directory in EFI System Partition  (Read 4254 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Avast snapshots directory in EFI System Partition
« on: November 18, 2016, 02:09:22 AM »
Customer PC, Windows 10 with Avast IS 11.2, unable to install latest W10 anniversary update (1607)
- error "couldn't update system reserved partition"

Turns out his 100MB EFI System Partition (ESP) only had 13MB available, not enough for an update (15MB?). I looked inside the partition and found that there was a 35MB "snapshots" directory created in May 2016 - after some research it appears that this directory and files are created by Avast, as part of its sandbox virtualization feature. I could not find any reference about this in my searches here or in google, but I did the following and hope that it will prevent Avast from taking up any of the scarce space in the ESP again:

  • in Avast Sandbox settings, changed Sandbox Storage setting from "same drive as modified file" to "C:\" - hoping it will henceforth only create snapshots on C:
  • deleted existing snapshots directory from ESP

Curious if anyone else has come across this?

cheers,
pbig
« Last Edit: November 18, 2016, 03:37:11 AM by pbig »

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast snapshots directory in EFI System Partition
« Reply #1 on: November 18, 2016, 05:25:53 AM »
Update to the latest version (12.3.2280): https://forum.avast.com/index.php?topic=189836.0
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast snapshots directory in EFI System Partition
« Reply #2 on: November 18, 2016, 10:20:52 AM »
Also teach the customer to keep things (especially security related) up-to-date.

REDACTED

  • Guest
Re: Avast snapshots directory in EFI System Partition
« Reply #3 on: November 20, 2016, 11:49:01 PM »
Thanks for the replies guys, I do understand about keeping software up to date.

Are you saying that the observed behaviour does not occur in the latest version?

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast snapshots directory in EFI System Partition
« Reply #4 on: November 21, 2016, 05:22:18 AM »
Are you saying that the observed behaviour does not occur in the latest version?
Yes, NG has been replaced by CyberCapture.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

REDACTED

  • Guest
Re: Avast snapshots directory in EFI System Partition
« Reply #5 on: November 21, 2016, 07:00:43 AM »
Excellent, thanks!

Offline Asyn

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 76037
    • >>>  Avast Forum - Deutschsprachiger Bereich  <<<
Re: Avast snapshots directory in EFI System Partition
« Reply #6 on: November 21, 2016, 07:17:15 AM »
You're welcome.
W8.1 [x64] - Avast Free AV 23.3.8047.BC [UI.757] - Firefox ESR 102.9 [NS/uBO/PB] - Thunderbird 102.9.1
Avast-Tools: Secure Browser 109.0 - Cleanup 23.1 - SecureLine 5.18 - DriverUpdater 23.1 - CCleaner 6.01
Avast Wissenswertes (Downloads, Anleitungen & Infos): https://forum.avast.com/index.php?topic=60523.0

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Avast snapshots directory in EFI System Partition
« Reply #7 on: November 21, 2016, 11:05:39 AM »
And on a note, 100Mb is not really enough for Windows 10 if also applications are installed on that drive/partition.