Constantly opening long file in Task Manager (.tmp.exe)

[Walgeon]

Hi, apologies if this is in the wrong section. 

I have had this file keep showing up in my Task Manager and it seems to open every second or so. It could be harmless as I have done scans with mb and Webroot and found nothing... But I just feel like it is too odd to leave alone.

I removed some of the info in case it is something important as it looks like some CD key, but why it would do this I have no idea. When I open file location it gives me "conhost.exe" which I believe is fine. 

This is just me being very paranoid and I was hoping someone here could just give me that peace of mind.

Thanks.

[Maurice Naggar]

Hi,     
My name is Maurice. I will be helping and guiding you, going forward on this case.
Let me know what first name you prefer to go by.

Please follow my directions as we go along.  Please do not do any changes on your own without first checking with me. 
If you will be away for more than 3 consecutive days,  do try to let me know ahead of time, as much as possible. 
  
Please only just attach   all report files, etc  that I ask for as we go along.

Please read all of these lines first so that it is all clear to you about our plan. I need a one time run of MBAR like listed here, please.

Please download Malwarebytes Anti-Rootkit (MBAR) from this link here

and save it to your desktop.

Doubleclick on the MBAR file and allow it to run.

•Click OK on the next screen, to allow the package to extract the contents of the file to its own folder named mbar.

•mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.

•After reading the Introduction, click 'Next' if you agree.

•On the Update Database screen, click on the 'Update' button.

•Once you see 'Success: Database was successfully updated' click on 'Next', then click the Scan button.

With some infections, you may see two messages boxes:

1.'Could not load protection driver'. Click 'OK'.
2.'Could not load DDA driver'. Click 'Yes' to this message, to allow the driver to load after a restart. Allow the computer to restart. Continue with the rest of these instructions.

•If malware is found, press the Cleanup button when the scan completes. .

Please attach the log it produces, you'll find the log in that mbar folder as MBAR-log-<date and time>***.txt . Please attach that to your next reply.
  
 

[Walgeon]

Hi, I tried to install the anti-rootkit and it will not install. I tried installing with admin and I get the same issue. I also tried installing into different locations and get the same issue.  

[Walgeon]

I managed to install it by opening the .exe file with 7zip. I will follow the rest of your guide now.

[Maurice Naggar]

Hi,  Very sorry to see that.  I have to wonder just where you saved MBAR.  The MBAR does not 'install'.  It is a standalone executable.  In any event, do the steps on this link to get, SAVE,  and then run Farbar F R S T   report tool.   Then attach here on this topic the 2 report TXT files.  If you wish, you can zip up the 2 reports into a ZIP file.

https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

 

[Walgeon]

mbar-log-2020-11-20 (16-49-08).txt

I did manage to install it. I just unzipped the exe file with 7zip. The place I installed it is where I tried to install it with the exe file. I have no idea why it didnt install. I downloaded it again to check and had the same issue.

It did not find any rootkit and everything it tells me is fine. I attached the report anyway just in case. 

I am guessing I have no issue. Just some random long file that keeps opening. It is strange but maybe it is normal now (I am paranoid with things so chances are it is just me)

 

Thanks for the help!

[Maurice Naggar]

Good morning.  Thank you for the MBAR log report.  That is fine result.   

do the steps on this link to get, SAVE,  and then run Farbar F R S T   report tool.   Then attach here on this topic the 2 report TXT files.  If you wish, you can zip up the 2 reports into a ZIP file.

https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you