Is this file really a virus?

[Lorraine W]

While doing a defrag (using PerfectDisc 8.0) my anti virus (Freedom -
software supplied by my ISP) it came up with a virus found at:

\DEVICE\HARDDISKVOLUME1\DOCUMENTS AND SETTINGS\LORRAINE\LOCAL
SETTINGS\TEMP\GLF21.TMP.EXE.

I did a couple of searches and can't find out a thing about this file. Does
anyone know anything about it?

Lorraine

 

[TOAO]

Well it look safe to delete it , its in your temp folder , Delete the file
and afterward use your anti-virus , See if it find anything

 

[Elmo]

While doing a defrag (using PerfectDisc 8.0) my anti virus (Freedom -
software supplied by my ISP) it came up with a virus found at:

\DEVICE\HARDDISKVOLUME1\DOCUMENTS AND SETTINGS\LORRAINE\LOCAL
SETTINGS\TEMP\GLF21.TMP.EXE.

I did a couple of searches and can't find out a thing about this file. Does
anyone know anything about it?

Lorraine

It has a random name so it won't be identified as a virus in a Google
Search. But it's obvious that it's a virus from the fact that: It's an
executable in a Temp folder, with a second, hidden extension that
wouldn't be seen if "Hide extensions for known file types" was selected.

 

[Lorraine W]

I tried to delete the file but I get the message "Cannot delete 'filename':
Access is denied. Make sure the disk is not full or write-protected and
that the file is not in use". I checked a box in the virus notification
dialogue to "delete file after next reboot" but the file was still there
after rebooting. I then ran a virus scan of just the ....\local
settings\temp folder and it didn't find the file as a virus. If I put my
cursor on the file in Windows Explorer, the virus warning pops up.

Any other ideas?

Lorraine


| Well it look safe to delete it , its in your temp folder , Delete the file
| and afterward use your anti-virus , See if it find anything
|
|
| | > While doing a defrag (using PerfectDisc 8.0) my anti virus (Freedom -
| > software supplied by my ISP) it came up with a virus found at:
| >
| > \DEVICE\HARDDISKVOLUME1\DOCUMENTS AND SETTINGS\LORRAINE\LOCAL
| > SETTINGS\TEMP\GLF21.TMP.EXE.
| >
| > I did a couple of searches and can't find out a thing about this file.
| > Does
| > anyone know anything about it?
| >
| > Lorraine
| >
| >
|
|

 

[Patrick Keenan]

While doing a defrag (using PerfectDisc 8.0) my anti virus (Freedom -
software supplied by my ISP) it came up with a virus found at:

\DEVICE\HARDDISKVOLUME1\DOCUMENTS AND SETTINGS\LORRAINE\LOCAL
SETTINGS\TEMP\GLF21.TMP.EXE.

I did a couple of searches and can't find out a thing about this file.
Does
anyone know anything about it?

Lorraine

It's almost certainly malware, and is probably running so you can't delete
it.

There are basically *no* legitimate programs - executables - that live in a
temp folder.

Clear these folders out regularly, one of the easiest and fastest ways to do
this is with ccleaner:

www.ccleaner.com

In your case, you'll probably need to reboot to Safe Mode, and may then also
need to use msconfig to disable the running malware so that you can delete
it.

HTH
-pk

 

[Poprivet]

While doing a defrag (using PerfectDisc 8.0) my anti virus (Freedom -
software supplied by my ISP) it came up with a virus found at:

\DEVICE\HARDDISKVOLUME1\DOCUMENTS AND SETTINGS\LORRAINE\LOCAL
SETTINGS\TEMP\GLF21.TMP.EXE.

I did a couple of searches and can't find out a thing about this
file. Does anyone know anything about it?

Lorraine

Almost certainly, yes, it's a virus.

Try this:
-- Go to Safe Mode
-- Start msconfig Start; run; type in msconfig and click OK.
-- Look for the file there. IF it's there, stop it from running.
-- Now go try to delete it.

Stay in Safe Mode:
If no luck, start Task Manager (CTRL-ALT-DEL)
-- Look for a similar name in either Applications and Process tab.
-- If in either place, select it and stop it.
-- Try deleting it again.

If no luck, come back and describe any messages, things that happened.
Include which malware detectors you ahve used and whether they were recently
updated. e.g. adaware, spybot, etc. It might be necessary to go to
HiJackThis if it's still a problem.

HTH
Pop`