Computing.Net > Forums > Security and Virus > win.tmp.exe assistance

Computing.Net: Over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to sign up now, it's free!

win.tmp.exe assistance

Reply to Message Icon

Original Message
Name: arran
Date: May 11, 2007 at 16:20:47 Pacific
Subject: win.tmp.exe assistance
OS: windows xp
CPU/Ram: 2.80 ghz, 1 gb ram
Model/Manufacturer: hp
Comment:

i was silly enough to download something i shouldn't have, and got some trojans etc,
i use norton internet security
they are logged as these
trojan vundo
downloader
trojan horse
trojan nebuler
downloader trojan
adware purity
norton deleted all of these but i still get a variety of win--.tmp.exe's trying to access the internet
i know this is found in my temp folder but it won't delete
i got hold of crap cleaner and used that
also i now have spyware blaster
and i just ran ad aware
but nothing wants to get rid of it
it is currently called
win75.tmp and it is apparently being used by another person or program and won't delete
any help would be gratefully recieved



Report Offensive Message For Removal


Response Number 1
Name: Derek
Date: May 11, 2007 at 16:33:41 Pacific
Reply: (edit)

Download > Install > Update > Run, this freebie trojan finder/fixer:

A-SQUARED FREE - JUST DOWN PAGE


DerekW


Report Offensive Follow Up For Removal

Response Number 2
Name: arran
Date: May 11, 2007 at 16:36:34 Pacific
Reply: (edit)

which download do i want from that page?


Report Offensive Follow Up For Removal

Response Number 3
Name: Derek
Date: May 11, 2007 at 16:42:08 Pacific
Reply: (edit)

a-squared Free 2.1

DerekW


Report Offensive Follow Up For Removal

Response Number 4
Name: arran
Date: May 11, 2007 at 16:44:17 Pacific
Reply: (edit)

thankyou, its currently downloading
i also have my hjt logfile if that needs to be posted as well?


Report Offensive Follow Up For Removal

Response Number 5
Name: Derek
Date: May 11, 2007 at 16:54:03 Pacific
Reply: (edit)

I'm not the guy for those logs. See how you get on with A Squared first, its usually pretty good.

DerekW


Report Offensive Follow Up For Removal


Response Number 6
Name: arran
Date: May 11, 2007 at 17:41:54 Pacific
Reply: (edit)

its still not getting rid of it
it got rid of some more but not the tmp file in my temp folder


Report Offensive Follow Up For Removal

Response Number 7
Name: Derek
Date: May 11, 2007 at 18:45:46 Pacific
Reply: (edit)

I'll send a personal message to our log expert to draw his attention to this post. If he's around he'll probably respond. Don't post log until asked (forum rules).

DerekW


Report Offensive Follow Up For Removal

Response Number 8
Name: arran
Date: May 12, 2007 at 08:48:05 Pacific
Reply: (edit)

thankyou, the problem seems to be internet related in that it tries to connect to the internet every 20 minutes or so, but i block it
if i keep the computer off the internet until there is a solution would you envisage there being any problems witht he computer?


Report Offensive Follow Up For Removal

Response Number 9
Name: Derek
Date: May 12, 2007 at 11:08:08 Pacific
Reply: (edit)

That sounds fine to me. I've sent the message.

DerekW


Report Offensive Follow Up For Removal

Response Number 10
Name: arran
Date: May 14, 2007 at 14:00:56 Pacific
Reply: (edit)

i can delete the files in the temp folder now but they keep replicating themselves so i gues si need to find the source of them and delete that


Report Offensive Follow Up For Removal

Response Number 11
Name: Derek
Date: May 14, 2007 at 14:40:34 Pacific
Reply: (edit)

Seems our HJT log guy is not around. You can run an auto analyzer here:

http://www.hijackthis.de/

It might help but they can be quite tricky and you must not kill off the wrong things.

Alternatively Google around for a website that undertakes HJT analysis as a regular norm.

Sorry I can't help further.


DerekW


Report Offensive Follow Up For Removal

Response Number 12
Name: arran
Date: May 15, 2007 at 08:47:36 Pacific
Reply: (edit)

i already have a hjt log, i'm not too sure what i should be looking for or how to delete from the registry either
any ideas?


Report Offensive Follow Up For Removal

Response Number 13
Name: arran
Date: May 15, 2007 at 09:06:43 Pacific
Reply: (edit)

sorry i misread you comment, i ran the check and believe i have found the rogue files, just need to get rid of them correctly then


Report Offensive Follow Up For Removal

Response Number 14
Name: Derek
Date: May 15, 2007 at 11:57:09 Pacific
Reply: (edit)

Yes, if you are sure they are rogues (Google often helps). The real problem is that often the darned things come straight back again and there are various other tools that it might be necessary to apply.

If you are still in trouble afterwards I'm happy for you to post the HJT log and I can look at it but I am not a real expert. Maybe two of us who don't really know enough will be better than one.


DerekW


Report Offensive Follow Up For Removal






Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home








Do you have your own blog?

Yes
No
I did before
I will soon


View Results

Poll Finishes In 4 Days.
Discuss in The Lounge
Poll History




Data Recovery Software