1.    03 Mar 2017 #1
    Join Date : Apr 2016
    Posts : 3
    Windows 10

    Virus Found in the Unistore Temp Directory by F-Secure


    All,

    I am running a Windows 10 Operating System and I use F-Secure as my Anti-Virus.

    I'm constantly getting popup alerts of virus removal.

    The location is C:\Users\Myuser\AppData\Local\Comms\Unistore\Data\Temp

    I will also say, I am no where near an Admin Account on this computer.

    My question is that I am actively monitoring this Directory and I am seeing temp files being added and removed. Below are a couple of the file names.

    Templedse0160f00000000031000.dat
    Templedse0160f00000000038103.dat

    Can someone explain what these are for, and why is this directory adding and removing in real time.
      My ComputerSystem Spec
  2.    03 Mar 2017 #2
    Join Date : Mar 2015
    Posts : 107
    Windows 10 Pro x64

    Your best bet is to upload all the files in that folder to virustotal.com and let it scan them. It uses 50+ different antivirus programs, so you'll definitely find out if it's a legitimate threat or a false positive.
      My ComputerSystem Spec
  3.    06 Mar 2017 #3
    Join Date : Apr 2016
    Posts : 3
    Windows 10
    Thread Starter

    Quote Originally Posted by BRKKAB View Post
    Your best bet is to upload all the files in that folder to virustotal.com and let it scan them. It uses 50+ different antivirus programs, so you'll definitely find out if it's a legitimate threat or a false positive.
    I just checked the directory and there are no files in that folder now. So I can't scan them.

    I will keep that link in mind though.

    Thank you.
      My ComputerSystem Spec
  4.    06 Mar 2017 #4
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    ulricken,

    Are you running any backup software or use the Mail app?
      My ComputerSystem Spec
  5.    06 Mar 2017 #5
    Join Date : Mar 2015
    Posts : 107
    Windows 10 Pro x64

    It's possible that Windows may be hiding the files in that folder. Open File Explorer, click on View at the top, click on Options, click on Change Folder and Search Options, click on View, jncheck Hide Protected Operating System Files, click Apply and OK. Reopen that folder you mentioned and if anythings there upload it to VirusTotal. Otherwise go back and recheck the Hide Protected Operating System Files, Apply and OK when your done.
      My ComputerSystem Spec
  6.    06 Mar 2017 #6
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    From what I can find, it apears the Windows 10 local mail files for the Mail app are stored here:

    C:\Users\<username>\AppData\Local\Comms\Unistore\Data\Temp

    The Comms\Unistore subdirectories in AppData are used for Windows apps.

    Also found F-Secure, and other AV programs are tagging this as a false positive.
      My ComputerSystem Spec
  7.    07 Mar 2017 #7
    Join Date : Mar 2015
    Posts : 107
    Windows 10 Pro x64

    Well then, if that's the case I'd use a different companies Antivirus. Try Bitdefender or Kaspersky. If they say it's a threat it is. Rescan them and make a list of which Antivirus programs said it was a threat and post it in this thread.
      My ComputerSystem Spec
  8.    07 Mar 2017 #8
    Join Date : Mar 2015
    Posts : 107
    Windows 10 Pro x64

    You can also download and run Adwcleaner, Junkware Removal Tool and ZHPCleaner. Run those 3 in that order, let each remove what it finds and restart your pc after each one is run.
      My ComputerSystem Spec
  9.    07 Mar 2017 #9
    Join Date : Aug 2016
    Posts : 553
    Windows 10 Home

    Best thing is to use VirusTotal. There are quite a few scanning engines used there.

    Navigate to the files, one at a time, double click on it so the file name is populated, then click: Scan it!

    IMPORTANT! If the file is listed as already analyzed, click on: Reanalyse file now

    Once completed, highlight the the address bar, and provide the link in your reply.

    @ulricken, are you still with us?
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Huge Temp Directory - Nuance
Hi, I installed win 10 a couple of weeks ago. ever since I've had this directory: C:\Windows\Temp\Nuance\OmniPageCSDK16 growing until it takes up all the empty room on my c:\ (it grows from 0 to 40 something gigs in a few days). If i...
General Support
dnsapi.dll VIrus Or Not?? Found in WinSxS\wow64_microsoft-windows
Good Day This File has been flaged as a Virus Did Reaserch On google Got some mixed answers Can any one please help Path and file ...
Software and Apps
Solved unable to create the directory "C:\users\tom\appdata\local\temp\*.tmp
trying to install visual studio code and this message pops up immediately. "Setup was unable to create the directory "C:\users\tom\appdata\local\temp\*.tmp" error 5 access is denied I tried taking ownership at appdata point but still no go....
Software and Apps
CPU not showing temp in Open hardware monitor or core temp
CPU not showing temp in Open hardware monitor or core temp Used to show ok, I am certain...In the BIOS when I boot the PC it shows ok approx 60-65oC But not in the aforementioned apps....cant think why Thanks
Drivers and Hardware
Solved Malwarebytes anti-malware home premuim found a virus
Hey guys my Malwarebytes anti-malware home premuim found a virus on 12/28/2015 the virus is called Registry Keys: 2Trojan.Agent, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MRT.exe, Quarantined, , Trojan.Agent,...
AntiVirus, Firewalls and System Security
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:34.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums