temp files

Viruses and worms
1

How do you get to the various temp files?

I see that it is often recommended that one of the first steps for virus first aid is to clean them out.

I’m having a heck of a time with a Win32 Trojan horse referring to a file called “tsinstall …”. I can’t find it. Avast! Says that is in an IE temp file.

It is sort of like it just keeps getting put in the chest by Avast! But as soon as it is done it shows itself again

I’m running W2k on a Fijitsu 3500 tablet.

Thanks.

2

CCleaner and CleanUp! are 2 applications that thoroughly can clean a system from temp files.

3

Other options: BeClean, ClearProg, Privacy Guardian, Washer… (click ‘links’ in my signature for more). Not all of them are freeware.
Google is your friend 8)

4

I erased files from temp directory, but the virus created it’s files there again and again.

5

Please don’t create a duplicate post for the same problem, all it does is cause duplication of effort and confusion, not to mention this Topic doesn’t relate to your problem.

I have answered your other post, you need to answer some questions I asked.

6

Hi Bigguyz,

Use Process Explorer to find any processes running from a temp location. (Highlight suspicious processes and look in the lower panel.) Do a bit of research and check out any processes: random file names are almost certainly malware. Legit apps. very rarely run from temp files. Use HijackThis! to delete startup entries for any malware you find, reboot and you should be able to clear out temp files- I’ve seen CCleaner fail to delete temp files where malware is present.

7

Are you using Windows XP?
Can you schedule a boot-time scanning?
Start avast! > Right click the skin > Schedule a boot-time scanning
Select for scanning archives.
Boot.

Other option is scanning in SafeMode (repeatedly press F8 while booting): http://support.microsoft.com/default.aspx?scid=kb;en-us;315222

Other good thing is disable System Restore, boot, enable it again. If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x and it’s not available in Windows 2k.

Enable/Disable System restore on Windows ME: http://support.microsoft.com/default.aspx?scid=kb;en-us;Q264887
Enable/Disable System restore on Windows XP: http://support.microsoft.com/default.aspx?scid=kb;[LN];310405