trz67F5.tmp (or some similar names, all are .tmp) files appears in different directories. They are PE-Executable. Avast detects them as Win32:MalOB-IJ [Cryp], but I can’t found what’s creating them and what harm it can do later?
What to imagine behind Win32:MalOb [Cryp]
https://blog.avast.com/2009/07/29/what-to-imagine-behind-win32malob-cryp/
upload suspicious file(s) to www.virustotal.com and test with 40+ malware scanners
when you have the result, copy the url in the address bar and post it here for us to see
alternative
Jotti http://virusscan.jotti.org/en
VirSCAN http://virscan.org/
Metascan http://www.metascan-online.com/