It's a parasite that generates a random file name with .tmp extension.
Try this: Tools > Internet Options > Advanced > Browsing
Uncheck the Enable 3rd party browser extensions
If this clears your problem then find out who the culprit(s) is/are with
these tools.
Let AD-Aware Scan your system for advertising Spyware
http://www.lavasoftusa.com
and:
SpyBot-S&D
http://security.kolla.de/
p.s Reset the 3rd party browser setting.
More: This may be caused by a third-party program (adware, spyware,
parasite).
Get AdAware and SpyBot and run them both. Keep them up to date.
Dealing with Unwanted Spyware, Parasites, Toolbars and Search Engines
http://mvps.org/winhelp2002/unwanted.htm
Additional link:
http://aumha.org/a/quickfix.htm
You may need this removal tool.
More: Complete list by variant with up-to-date information.
http://www.merijn.org/cwschronicles.html
More: Removal tool:
http://www.merijn.org/files/cwshredder.zip
Read this: "So how did I get infected in the first place?"
http://forums.net-integration.net/index.php?showtopic=3051
--
If all fails, you may have the peper trojan, get help here.
Go to
http://www.spywareinfo.com/downloads.php#det
Download "Hijack This!" [freeware] or download direct (below):
http://www.merijn.org/files/hijackthis.zip
If you get a 404 error or Access denied, try:
http://216.180.252.218/~spywareinfo.com/downloads/tools/hijackthis.zip
Unzip the Download file in a NEW FOLDER that you can create before you start
the download.
DO NOT use any of the TEMP folders that are presently in your computer.
Double-click "HijackThis.exe" and Press "Scan".
When the scan is finished, the "Scan" button will change into a "Save Log"
button.
Click: "Save Log" (generates "hijackthis.log")
Next, HijackThis | Config [button] | Misc Tools [button]
Click: Generate StartupList log [button] (generates "startuplist.txt")
Next, go to the below location:
http://www.spywareinfo.com/forums/
Sign in, then copy and paste both files in your message.
HijackThis Quick Start Help
http://www.tomcoyote.org/hjt/
The Tutorial if you want to know more about the results or the .log file.
http://www.merijn.org/htlogtutorial.html
Henri Leboeuf
Web page:
http://www.colba.net/~hlebo49/index.htm
===
