.tmp insecure drivers modal popup locks out machine

Thank you for the reply.
The detection is coming from the AVG "Self-Defense" module that's protecting the AVG installation from deactivation or uninstallation. It detected and blocked an exploitable driver in your system.Based on the driver name and its path, you might be able to find and uninstall the 3rd-party program that's trying to load this driver. I am shocked to know that you find the path to be empty.To investigate this further, please collect support logs using our sysinfo tool. Click the link Sysinfo to know about it. Provide your case number as ticket number and generate the logs. The ticket number details will be shared to you via email.
Thank you and keep us updated!

Hello There,

- Windows 7
- AVG UNinstalled for now, so my computer can function properly

The multiple modal popup windows prevent me from investigating further. 

When the multiple modal popups stack up, I cannot get to the right one to close it or investigate further.

Typically, three popups appear and at that point I cannot choose any operation to close any of them (close all, pick from hover, etc...).  I also cannot perform screen shots, though I might be able to take a picture of the model window with my phone.  Beyond that, I have not found a method that allows me to close the modal popups.

The problem is the modal nature of the popup(s).  If it/they were NOT modal then I could proceed. 

Is there any way to prevent these popups from being modal?

I am a paid subscription customer and have had this problem for months now.

Best Regards,

Hello AVG Community,

For the past few months I have had this problem.  When the computer boots and starts to load its startup items, I am confronted with AVG popup screens that inform me of a *potential* security risk on the part of "insecure drivers that could allow hackers to access my computer".  The files being isolated for this treatment are always in the form of a tmp####.tmp file or files (no directory mentioned) and the #### part is never the same across reboots.  

When this happens the modal nature of the screens prevents me from using my computer, as there are typically no less than three (3) of these windows active.  Once this happens, I cannot click on anything in my Windows interface and am forced to either press CTRL-ALT-DEL to force an interrupt or press the power button to force a system shutdown.

The only way I can prevent this from happening is to guess and hover my mouse where the OK button appears in the modal screen, and pre-click about 20 times to slow down the boot process to the point where the screen(s) are presented more slowly, at which point I can clear them off.  Otherwise, its hard or soft reset time.

AVG gives no information as to where these tmp####.tmp files reside, nor which process owns them, so I am at a loss as to how I might troubleshoot this situation by disabling or removing the offending application.  Also, the exceptions screen requires a fixed filename, whereas the filename being identified is ever-changing.

When I am able to clear the modal popup screens, I run a system scan, which comes up clean.

Does anyone know how I might go about identifying the owning process of these tmp####.tmp files so I can isolate it and move to the next stage of troubleshooting?

In the meantime, I have installed an alternative AV which does not freeze my system.

HEY AVG TEAM:  It would be great if the AVG popup screen was:

1)  NOT modal

2)  Provided full path information to the offending driver

3)  Provided the owner process name of the offending driver

Thanks!

Hello Graham,

You've reached the AVG community support forum.
We apologize for the inconvenience. We'll certainly look into this and help you.
First, please specify the operating system system of your computer and whether you've uninstalled AVG Internet Security from your computer when you installed an alternate antivirus software.
Second, we'd like to inform you that AVG threat pop-ups do display the detection path and the component which made the detection.
If you'd be so kind as to click on "See details" on the threat pop-ups you've been receiving and share us a few screenshots, it'd be very helpful.
You can post the screenshot here in your topic. Click on Answer & then click on the Image [mountain symbol] & follow the instructions.
Thanks in advance!

Hello,

The machine is working perfectly fine with the alternative AV program.  Pity AVG has a false positive.

One of the files being flagged by AVG appears to be tmpdc5.tmp, a Crystal Disk Info support file.

Apparently, the file tmpdc5.tmp is replaced by Trojan.Download4.14406

I will investigate further and report my findings as I generate them.

The biggest issue I am facing in my investigation is the lockup caused by modal popups - which are NOT necessary to inform the user there is a file (or files) that may be "at risk".  Is there a possibility that AVG change its popup to non-modal please, which would make investigation and troubleshooting easier?

g.

Hello Graham,

You've reached the AVG community support forum.
We apologize for the inconvenience. We'll certainly look into this and help you.
First, please specify the operating system system of your computer and whether you've uninstalled AVG Internet Security from your computer when you installed an alternate antivirus software.
Second, we'd like to inform you that AVG threat pop-ups do display the detection path and the component which made the detection.
If you'd be so kind as to click on "See details" on the threat pop-ups you've been receiving and share us a few screenshots, it'd be very helpful.
You can post the screenshot here in your topic. Click on Answer & then click on the Image [mountain symbol] & follow the instructions.
Thanks in advance!

Thank you for the reply.
The detection is coming from the AVG "Self-Defense" module that's protecting the AVG installation from deactivation or uninstallation. It detected and blocked an exploitable driver in your system.Based on the driver name and its path, you might be able to find and uninstall the 3rd-party program that's trying to load this driver. I am shocked to know that you find the path to be empty.To investigate this further, please collect support logs using our sysinfo tool. Click the link Sysinfo to know about it. Provide your case number as ticket number and generate the logs. The ticket number details will be shared to you via email.
Thank you and keep us updated!

Thank you for writing us back, Graham.
We have already sent an email to your email address offering additional help please check the email and revert us back for further help.
Thank you.

Thank you for writing us back, Graham. 
We apologize for the inconvenience caused to you.
We certainly check and help you with the issue caused
We have sent an email to your email address offering additional help please check the email and revert us back for further help.