AV

[Guest]

My av gives message "SL48E.TMP", do you want to run this program? I think i
is in the sys32 folder. Is it a MS program and hence OK to run?

 

[Malke]

My av gives message "SL48E.TMP", do you want to run this program? I think i
is in the sys32 folder. Is it a MS program and hence OK to run?

No, it's not an XP program and no, it probably isn't OK to run.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


Malke

 

[Newbie Coder]

ElGordo,

Some TMP files run like Yahoo Messenger installation etc & is more likely found
in your TEMP folder

START | RUN | Type %temp% & press ENTER. Is the file in there? If so, delete it
after sending to Symantec

Most probably if its a nasty file (laymans terms) then no virus application...
will pick it up as the filename is randomly created

Best thing you can do is zip it, open the zip & encrypt with the 'infected'
password, rename the zip 'Submissions' & sent it to (e-mail address removed)

Subject: Submission

And in the body give as much detail as possible

Search for the file using 'Find Files & Folders' to get its exact location & you
should receive a reply from Symantec quickly with a reply if its know otherwise
max 48 hours with the results

 

[Guest]

No, it's not an XP program and no, it probably isn't OK to run.

Go through these general malware removal steps systematically -
http://www.elephantboycomputers.com/page2.html#Removing_Malware

Include scanning with David Lipman's Multi_AV and follow instructions to
do all scans in Safe Mode.

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions
http://pcdid.com/Multi_AV.htm - download

When all else fails, run HijackThis and post your log in one of the
specialty forums listed at the link above (not here, please).

Standard caveat: If the procedures look too complex - and there is no
shame in admitting this isn't your cup of tea - take the machine to a
professional computer repair shop (not your local version of
BigStoreUSA). Please be aware that not all local shops are skilled at
removing malware and even if they are, your computer may be so infested
that Windows will need to be clean-installed. Have all your data backed
up before you take the machine into a shop.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
It is in C:\WINDOWS\Prefetch and is a 27Kb PF file

 

[Plato]

My av gives message "SL48E.TMP", do you want to run this program? I think i
is in the sys32 folder. Is it a MS program and hence OK to run?

All. tmp/temp files are safe to delete, and is recommended to do on a
regular basis.