Help identifying and deleting suspicious temp file process

satellite1 · 10-09-2009, 02:55 PM

Hello!

I just discovered a suspicious temp file in my windows/temp directory. I have no idea how long I've had it or what it belongs to as its updates its date at start up. When I check the properties for the file, nothing is indicated as to its source or what process its connected to.

The file renames itself at each reboot i.e :JETC013.tmp, JETE2EE.tmp, etc. I "caught this file creating other files with just numbers "26337252" in the temp folder then they disappear.

When I attempt to delete it, I get a message stating that file is open in another program? I did this from command prompt as well. By all accounts this feels like a virus or malware. Ran Norton, ccleaner no problems found.

Thanks in advance!

**johnb35** · 10-09-2009, 05:57 PM

Please run combofix and post the log that it displays at the end. Follow the instructions carefully and download it from here.

http://www.bleepingcomputer.com/comb...o-use-combofix

Afterwards download and run hijackthis and post the logfile.

10-09-2009, 02:55 PM	#1 (permalink)
satellite1 New Member Join Date: Oct 2009 Posts: 1	Help identifying and deleting suspicious temp file process Hello! I just discovered a suspicious temp file in my windows/temp directory. I have no idea how long I've had it or what it belongs to as its updates its date at start up. When I check the properties for the file, nothing is indicated as to its source or what process its connected to. The file renames itself at each reboot i.e :JETC013.tmp, JETE2EE.tmp, etc. I "caught this file creating other files with just numbers "26337252" in the temp folder then they disappear. When I attempt to delete it, I get a message stating that file is open in another program? I did this from command prompt as well. By all accounts this feels like a virus or malware. Ran Norton, ccleaner no problems found. Thanks in advance!

10-09-2009, 05:57 PM	#2 (permalink)
johnb35 Moderator Join Date: Sep 2005 Location: Near Joliet Illinois Age: 39 Posts: 3,616	Please run combofix and post the log that it displays at the end. Follow the instructions carefully and download it from here. http://www.bleepingcomputer.com/comb...o-use-combofix Afterwards download and run hijackthis and post the logfile. __________________ Motherboard - Gigabyte GA-EP45-UD3R CPU - E8400 Memory - 2GB Corsair XMS2 (2x 1gb) Graphics - ATI HD3870 Hard Drives - 250GB Seagate DVD Drive - Lite-On DVD Burner - Lite-On Power Supply - Rosewill RP600V2-S-SL 600W 22" Acer widescreen AL2216WBD

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode