trz.tmp files

ComboFix

[*]Please open Notepad (Start → Run → type notepad in the Open field → OK) and copy and paste the text present inside the code box below:

ClearJavaCache::

DDS::
mStart Page = hxxp://start.sweetpacks.com/?src=10&st=12&crg=3.5000006.10042&barid={942B136B-CEF8-11E2-8BFA-C80AA987641E}

Firefox::
FF - ProfilePath - c:\users\Trish\AppData\Roaming\Mozilla\Firefox\Profiles\1ziu2w9m.default
FF - ExtSQL: 2013-06-06 15:31; {7D4F1959-3F72-49d5-8E59-F02F8AA6815D}; c:\program files\Updater By SweetPacks\Firefox

[*]Save this as CFScript.txt and change the “Save as type” to “All Files” and place it on your desktop.

http://img.photobucket.com/albums/v706/ried7/CFScriptB-4.gif

[*]Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before following the steps below. They can interfere with ComboFix or remove some of its embedded files which may cause “unpredictable results”.
[*]Referring to the screenshot above, drag CFScript.txt into ComboFix.exe.
[*]ComboFix may request an update; please allow it.
[*]ComboFix will now run a scan on your system. It may reboot your system when it finishes. This is normal.
[*]When finished, it shall produce a log for you. Copy and paste the contents of the log in your next reply.

CAUTION: Do not mouse-click ComboFix’s window while it is running. That may cause it to stall.

Still with me?

I have a solution, hope its work…
i already try, and its work for me…

first add “take ownership” to your pc…
http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/

second go to file location of trz.tmp file.
Example [C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup]

right click of file and “Take ownership”

last delete all trz file…

Hope it helpfull…

Thanks for your hint: it worked for me
http://emoticon.gregland.net/emoticon/@GregLand/ay.gif

this bloody “trz*.tmp” installed itself in one of “My Documents” files, on an external hard disk, and used to “eat” all of my ram
http://emoticon.gregland.net/emoticon/@GregLand/aq.gif
. As it was Avast who alerted me, I tried a complete scan with it (with my own deep requirements); then, I used Spybot… did a full scan disk… CCleaner… Glary… with no results but stopping all the alerts > however, it was still where Avast told me (got to know about it by pointing the name in the alert with my mouse (it would be time Avast finds a solution since, on all fora I went, all victims of this malware used this antivirus).
http://emoticon.gregland.net/emoticon/@GregLand/dk.gif

Following your advise, I downloaded “Take Ownership” and operated as you indicated: I at least could remove the last “trz*.tmp” without it replicating.
http://emoticon.gregland.net/emoticon/@GregLand/em.gif

Thanks a lot,
http://emoticon.gregland.net/emoticon/@GregLand/ad.gif

Marco

Hi edysuperb and jeffce,

Bad news: trz*.tmp still are there, in my external Hard Drive in “$RECYCLE.BIN”, and still memory eating.
http://emoticon.gregland.net/emoticon/Triste/triste_1.gif

In fact, as far as I am concerned, the solution was quite simple: since windows updates last month, there was quite a few of those I could not install… due to only one security program. I had to install those “compatible” updates one by one to find out only one does not work and, now, no more remains of “trz*.tmp” in CCleaner.
http://emoticon.gregland.net/emoticon/@GregLand/ad.gif

http://emoticon.gregland.net/emoticon/@GregLand/ay.gif