Unknown File in Windows Temp

[Warren]

I have a file in C:Windows\Temp listed as WFV2.tmp. It is 35,996 kb in size
and cannot be deleted in normal windows mode. Upon rebooting in Safe mode,
it is not listed. I have run a scan with McAfee in windows and in DOS with
the SuperDat. Neither shows any infection. I am not too concerned as a
result but was wondering if anyone has an idea as to what program might be
utilizing this file so that it cannot be deleted. Thanks in advance!!

I am using Windows XP SP3 in case that helps.

 

[Dave M]

Hi Warren;

Unfortunatly file names mean very little, since both you and malware can
change file names easily. It is a bit suspicious though that it either moved
or changed it's name, so I'd suggest you run a couple of the on-line scanners
in SAFE mode with networking to assist McAfee in determining that your system
is really clean:
http://wiki.castlecops.com/Malware_Removal:_Online_Anti-Virus_Scans

Best of luck, Warren.

 

[smlunatick]

Hi Warren;

Unfortunatly file names mean very little, since both you and malware can
change file names easily.  It is a bit suspicious though that it eithermoved
or changed it's name, so I'd suggest you run a couple of the on-line scanners
in SAFE mode with networking to assist McAfee in determining that your system
is really clean:http://wiki.castlecops.com/Malware_Removal:_Online_Anti-Virus_Scans

Best of luck, Warren.

C:\Windows\Temp folder is a temporary folder to store work files.
You should not save any files in this folder. You can clear out all
file in this folder. Locate CCleaner and schedule routine clear out
of all TEMP folders.

 

[Bob Lucas]

I have a file in C:Windows\Temp listed as WFV2.tmp. It is 35,996 kb in
size and cannot be deleted in normal windows mode. Upon rebooting in
Safe mode, it is not listed. I have run a scan with McAfee in windows
and in DOS with the SuperDat. Neither shows any infection. I am not
too concerned as a result but was wondering if anyone has an idea as to
what program might be utilizing this file so that it cannot be deleted.
Thanks in advance!!

I am using Windows XP SP3 in case that helps.

WFV2.tmp is probably a temporary file, and is created by a program that
starts automatically, every time you boot your computer into normal
Windows XP mode. If you use Notepad to view the content of the file,
you may obtain clues to its provenance.

Also, try a Google search against WFV*.tmp.

It appears that the McAfee Anti-Virus Scanning Engine 5.3.00 (in McAfee
VirusScan Enterprise 8.0i) creates WFV* temporary files, every time a
computer boots into normal Windows XP mode. Have a look at the
following pages:

https://knowledge.mcafee.com/article/21/616668_f.SAL_Public.html

https://knowledge.mcafee.com/article/982/616650_f.SAL_Public.html

https://knowledge.mcafee.com/article/858/616728_f.SAL_Public.html

 

[Warren]

Thanks to everyone for posting. It appears the file in question was indeed
created by the latest McAfee scanning engine.