My Temp Folder is constantly being invaded by win**.tmp.exe files and just win**.tmp files i try making the folder read only but i believe a worm or virus is unchecking that other symtons include my download manager popping up waiting to dl random bin files i scanned my syetem with spybot1.4 ad aware and norton all with the latest updates nothing comes up i would lvoe any help thanks i have hijack this if anyone needs a report

Go to http://kaspersky.com/kos/english/kavwebscan.html Click Accept When the updates are finished downloading, click Next>Scan Settings Under Scan using the following antivirus database:, select extended Make sure the Scan Archives and Scan Mail Bases options are selected as well. Click OK Click My Computer and wait for the scan to finish Click Save Report As. Under Save as type:, select Text file. Save this log to your Desktop and post a copy of it here. Download Ewido Security Suite then set it up this way Ewido Setup Instructions We will run it in safe mode later Please download ATF-Cleaner from this link http://www.atribune.org/content/view/19/2/ by Atribune. Reboot into safe mode by following the directions Here if you need them. Run Ewido from safe mode. When the scan has completed, Ewido will create a report.txt file. Click the "Save Report" button on the bottom of the screen and save the log to your desktop. Run ATF-Cleaner from safe mode.Double-click ATF-Cleaner.exe to run the program. Under Main choose: Select All Click the Empty Selected button. Please post a Hijack This log so that any files associated with a virus/spyware/hijacker can be identified. You can download Hijack This at this link http://www.tomcoyote.org/hjt/ then place it into a folder of it's on, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed. Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button. Press that, save the log, Ctrl-A to Select All, and copy its contents into the text editor at this forum. Do not fix anything yet unless you know what you are doing. This is a powerful tool that can crash the computer if used improperly.

I have the same problem. I keep getting 2 new temp files every 2 minutes. An updated NAV scan shows a trojan in windows\system32\winwhx32.dll but cannot clean, delete or quarantine it so it is still on my system. How can I get rid of it? My PC is a standalone and not connected to the Internet. I am typing this from a public domain. It must have got infected when I installed something. Is there a tool I can download here and take back home. I have Hijack this and this indicated the trojan was affecting winlogon/notify(?) or something similar. Any help greatly appreciated.