exe (?) file in tempt folder

Discussion in 'other security issues & news' started by snowy, Nov 13, 2002.

Thread Status:
Not open for further replies.
  1. snowy

    snowy Guest

    For several days I have found an unknown exe file in the windows\tempt folder........over and over it shows up there.........its name nsu an there is a (.) there maybe a .com after it but frankly I forgot right at this moment........but what bothers me is that its a "set-up" that will install if opened

    I do not use e mail......the only time that "download file" is enabled is when I am actually ready to download something............tonight there was also a tempt file named "harry potter" I do not use automatic update............so how is this exe file entering ?

    any ideas appreciated.


    snowman
     
    snowy, Nov 13, 2002
    #1
  2. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,285
    Location:
    New England
    Do you mean \temp\ folder or \tempt\? I'm not aware of a folder named \tempt\ but since you typed it in both topic title and message, I assume it's not a typo.

    Also, are you saying that you've actually run this file (since you said "its a "set-up" that will install if opened")? Did it display anything interesting when run that might help explain it?

    In any case, for the moment let's assume that it's not a virus or trojan since I'm assuming you've scanned your system for malware on a regular basis. The next time it appears, right click on it and see if it has extend properties. If it is an installer, it should have information like company name, product name, version, etc. Which could completely explain what it is.

    Just from what you've said, I'd guess for the moment that it is an update installer of some sort from software you are running - AV/AT or another that gets regular update, even though you don't let it run automatically, could it get left behind from some update you do trigger manually and just haven't related to it yet? Many of these install by downloading an installer file, and running it from \Temp\ folder.
     
    LowWaterMark, Nov 13, 2002
    #2
  3. snowy

    snowy Guest

    LowWatherMark


    sorry.....its a TEMP file......bad typing on my part......


    good idea....I'll check the properties. No,, I didn't make an attempt to open.........yes..possibly an update..install two trojan scanners recently.....about the time that this began to occur..........
    strangely.....since my last re-connection these unknown files are not appearing........I've been monitoring the temp folder constantly as I surf......went to each url I visited earlier today...........in fact my temp folder is remaining empty except for one normal os file.........I entered a few new blocking rules before accessing the internet......wonder if that has prevented this.

    My friend.....I'll just sign off on this post an wait to see what happens during the coming days.......this has not been one of my most enjoyable days an I need to relax awhile...........kind of took a don't care attitude about the computer......

    I do as always appreciate your reply and effort....thank you..

    Snowman
     
    snowy, Nov 13, 2002
    #3
  4. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    18,285
    Location:
    New England
    Okay. Have a good rest and we'll see you when you get back!! :)

    All the best,
    LowWaterMark
     
    LowWaterMark, Nov 13, 2002
    #4
  5. eyespy

    eyespy Registered Member

    Joined:
    Feb 20, 2002
    Posts:
    490
    Location:
    Oh Canada !!
    Hi Snowy !
    I delete/wipe all contents in ALL my Temp Folders every couple of days with no ill effects.
    Having said that, it still wouldn't hurt to investigate that .exe file you previously mentioned.

    regards,
    bill ;)
     
    eyespy, Nov 13, 2002
    #5
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...