Computing.Net > Forums > Security and Virus > win##.temp.exe virus help

win##.temp.exe virus help

Reply to Message Icon

Original Message
Name: mercinarynurse
Date: May 15, 2006 at 07:40:09 Pacific
Subject: win##.temp.exe virus help
OS: Win XP Sp 2
CPU/Ram: 1.8 Athlon 64 mobile
Model/Manufacturer: Tiny (model unknown)
Comment:

I have recently had the misfortune of picking up this virus. None of my spyware or antivirus programmes seem capable of removing it. Thank fully my firewall seems to be keeping it from doing any harm but i cant seem to remove it. I have tried a method decribed in a previous thread on this forum to no effect. Deleting my temporary items has also proven useless. Any help would be greatly appreciated.


Report Offensive Message For Removal

Response Number 1
Name: Jennifer SUMN
Date: May 15, 2006 at 08:14:17 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

Not sure if what you're seeing is a virus or spyware. Have you disabled System Restore and logged in through Safe Mode, THEN tried deleting the file?

Life is more painless for those who are brainless.


Report Offensive Follow Up For Removal

Response Number 2
Name: mercinarynurse
Date: May 15, 2006 at 08:20:53 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

yeah i have tried that but to no effect. It seems to be a virus that is causing the download of spyware. My firewall goes nuts riughly every 5 mins or so blocking a browser hyjack attempt by it. It presents itself as win##.temp.exe with the ## representing a different combination of numbers and letters e.g win20d.temp.exe


Report Offensive Follow Up For Removal

Response Number 3
Name: Jennifer SUMN
Date: May 15, 2006 at 09:32:27 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

What anti-virus program are you running?

Life is more painless for those who are brainless.


Report Offensive Follow Up For Removal

Response Number 4
Name: XpUser4Real
Date: May 15, 2006 at 10:05:35 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

try dowloading Crap Cleaner and ATF-Cleaner and run them on safe mode, see if that clears up your problem.

Hopefully my advice will help you...Please post back with your results....thanks


Report Offensive Follow Up For Removal

Response Number 5
Name: mercinarynurse
Date: May 15, 2006 at 10:15:46 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

thanks i will give it a try. I currentlt just use AVG free anti-virus. I als tried pandabut again to no effect.


Report Offensive Follow Up For Removal


Response Number 6
Name: murr
Date: May 15, 2006 at 10:27:16 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

Our resident guru "Jabuck" seems to be busy at the moment so i will get you prepared for when he comes on.Save all logs and do not post them until he asks for them.
<
Download Ewido then set it up this way Ewido Setup Instructions You will need this later in safe mode

Please download ATF-Cleaner to your desktop from this link
ATF-Cleaner You will need it later in safe mode

Next follow these directions to reboot into Safe Mode

Run Ewido and let it delete all that it finds.

Double-click ATF-Cleaner.exe to run the program.
Under Main choose: Select All
Click the Empty Selected button.

Reboot into normal mode.

Run this free online scan from Kaspersky
Click Accept
When the updates are finished downloading, click Next, Scan Settings
Under Scan using the following antivirus database:, select extended
Make sure the Scan Archives and Scan Mail Bases options are selected as well. Click OK
Click My Computer and wait for the scan to finish
Click Save Report As. Under Save as type:, select Text file. Save this log to your Desktop.

Download Hijack This Here then place it into a folder of it's own, such as C:\HJT, so that back up copies can be made and not clutter your desktop or other folders and the backup copies of deleted items can be easily located if needed.

Once saved double click HijackThis.exe, and press "Scan". When the scan is finished, the "Scan" button will change into a "Save Log" button.
Press that, save the log.
Have the logs ready from Ewido,Kaspersky and HJT for when "Jabuck" comes on.


Report Offensive Follow Up For Removal

Response Number 7
Name: mercinarynurse
Date: May 15, 2006 at 13:27:07 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

Thank you. It is all prepared but i am in the UK so i may not be here when "Jabuk" is due to the time difference. Again thanks


Report Offensive Follow Up For Removal

Response Number 8
Name: Derek
Date: May 15, 2006 at 15:32:50 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

No need to worry about time zones. If jabuck come along and if he request a log then you will see this request later when you pop back here and can post it then.

DerekW


Report Offensive Follow Up For Removal

Response Number 9
Name: mercinarynurse
Date: May 15, 2006 at 17:17:55 Pacific
Subject: win##.temp.exe virus help
Reply: (edit)

hey everybody thanks very much for all your help. It would seem that at some point during the procedure Murr detailed this virus was removed. That is 2 say it has been 3 hours now and it hasnt reared its head. Hopefully all is sorted if not il put something else up. Thanks everybody for all your help.


Report Offensive Follow Up For Removal






Use following form to reply to current message:

   Name: From My Computing.Net Settings
 E-Mail: From My Computing.Net Settings

Subject: win##.temp.exe virus help

Comments:

 


  Homepage URL (*): 
Homepage Title (*): 
         Image URL: 
 
Data Recovery Software