Author Topic: Private Browser Data Being Copied to BCLTMP  (Read 1622 times)

0 Members and 1 Guest are viewing this topic.

Offline Vadol

  • Newbie
  • *
  • Posts: 4
Private Browser Data Being Copied to BCLTMP
« on: November 09, 2018, 08:21:06 PM »
While cleaning out my AppData\Local\Temp folder I found a folder named BCLTMP (C:\Users\[NAME]\AppData\Local\Temp\BCLTMP\). Inside it was three folders chrome edge & firefox. Other than the edge folder, a browser I don't use, they contained Chrome's History & Web Data files and Firefox's places.sqlite & search.json.mozlz4!

I did full scans of my computer with Avast, Malwarebytes, TrendMicro HouseCall & TDSSKiller. Nothing found. I then ran Process Monitor, set a filter for path contains BCLTMP and waited.

avastsvc.exe (SHA256: 27559e51b9c887d8ec72ac9eb239fed9766083ff9dd3e57c24d286a086075cf4) was caught creating these files! No other service or exe was caught creating or accessing them.

It also created copies of Firefox extensions, like uBlock0@raymondhill.net.xpi, but renamed or re-zipped to uBlock0@raymondhill.net.zip.

I want to know what Avast is doing with my private browser data, and how to stop it. I have disabled Avast entirely until this is resolved.

Online bob3160

  • Avast √úberevangelist
  • Probably Bot
  • *****
  • Posts: 41906
  • 59 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Private Browser Data Being Copied to BCLTMP
« Reply #1 on: November 09, 2018, 10:14:29 PM »
Reported to Avast. This is the weekend so you may need to wait a while.
Free avast! Security Seminar: https://goo.gl/kh3cqR  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 10 Pro v1903 64bit, 8 Gig Ram, AvastFree 19.6.xxxx, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline Vadol

  • Newbie
  • *
  • Posts: 4
Re: Private Browser Data Being Copied to BCLTMP
« Reply #2 on: November 09, 2018, 10:56:07 PM »
Reported to Avast. This is the weekend so you may need to wait a while.

Thanks  :)

Offline MartinZ

  • Moderator
  • Advanced Poster
  • *
  • Posts: 1020
  • Product Manager
Re: Private Browser Data Being Copied to BCLTMP
« Reply #3 on: November 13, 2018, 08:37:56 AM »
Hi. it's temp folder of Browser Cleanup feature. We use it for example to extract the icons of installed extensions.

Offline Vadol

  • Newbie
  • *
  • Posts: 4
Re: Private Browser Data Being Copied to BCLTMP
« Reply #4 on: November 13, 2018, 11:17:30 AM »
Then the problem is that the Browser Cleanup feature is NOT installed and therefore should NOT be touching my browsers files!

Offline Vadol

  • Newbie
  • *
  • Posts: 4
Re: Private Browser Data Being Copied to BCLTMP
« Reply #5 on: November 20, 2018, 11:49:48 PM »
It is extremely concerning that Avast continues to copy my browser's data without this component installed!

Offline MartinZ

  • Moderator
  • Advanced Poster
  • *
  • Posts: 1020
  • Product Manager
Re: Private Browser Data Being Copied to BCLTMP
« Reply #6 on: November 21, 2018, 12:33:52 PM »
We work on a fix, the problem is that part of the component is included in the remote VPS part