EXE file keeps showing in Windows TEMP folder at start-up

[Guest]

During start-up an executable file with a random file name (eg DV3286.EXE)
keeps on showing in Windows TEMP folder (c:\windows\temp) and in my Task
Manager. I can END TASK the process and the file will disappear but when I
restart the computer, it will show up again with a different file name (eg
MYA049.EXE)
The size of the file is 169KB and has the date 8/31/2005 2:18 PM.

I verified my START up files and I couldn't trace it there. I ran my
anti-virus (Trend) and Microsoft Anti-spyware and it didn't detect this item.

Any idea how I could verify where this file is being triggered from in my
system?

Thanks.

 

[seth]

would this file by any chance have a little brown dog icon?
that's a trendmicro file; don't ask what it is or why it's there, but it's
part of the realtime scan
i opened a support case about it some time ago and they confirmed it is part
of their product
it's safe

 

[Guest]

Yes, it has the little brown dog icon.

Thanks for this info.

 

[Guest]

I checked the Trend Micro KB and this is what they say about that EXE file:

"The file is the OfficeScan Watchdog service on the anti-hacking mode. The
Watchdog service keeps an eye on the OfficeScan client services. The Watchdog
service also restarts the OfficeScan services when they are unexpectedly
terminated due to hacker or virus attack. The anti-hack mode allows the
Watchdog service to have random names to prevent viruses or other malicious
threats from identifying the service and terminating"

 

[seth]

ahh they have an article about it now
last i looked (couple years ago) couldn't find anything