Jump to content

Recommended Posts

Guest ElGordo
Posted

My av gives message "SL48E.TMP", do you want to run this program? I think i

is in the sys32 folder. Is it a MS program and hence OK to run?

  • Replies 4
  • Created
  • Last Reply
Guest Malke
Posted

Re: AV

 

ElGordo wrote:

> My av gives message "SL48E.TMP", do you want to run this program? I think i

> is in the sys32 folder. Is it a MS program and hence OK to run?

>

 

No, it's not an XP program and no, it probably isn't OK to run.

 

Go through these general malware removal steps systematically -

http://www.elephantboycomputers.com/page2.html#Removing_Malware

 

Include scanning with David Lipman's Multi_AV and follow instructions to

do all scans in Safe Mode.

 

http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

http://pcdid.com/Multi_AV.htm - download

 

When all else fails, run HijackThis and post your log in one of the

specialty forums listed at the link above (not here, please).

 

Standard caveat: If the procedures look too complex - and there is no

shame in admitting this isn't your cup of tea - take the machine to a

professional computer repair shop (not your local version of

BigStoreUSA). Please be aware that not all local shops are skilled at

removing malware and even if they are, your computer may be so infested

that Windows will need to be clean-installed. Have all your data backed

up before you take the machine into a shop.

 

 

Malke

--

Elephant Boy Computers

http://www.elephantboycomputers.com

"Don't Panic!"

MS-MVP Windows - Shell/User

Guest Newbie Coder
Posted

Re: AV

 

ElGordo,

 

Some TMP files run like Yahoo Messenger installation etc & is more likely found

in your TEMP folder

 

START | RUN | Type %temp% & press ENTER. Is the file in there? If so, delete it

after sending to Symantec

 

Most probably if its a nasty file (laymans terms) then no virus application...

will pick it up as the filename is randomly created

 

Best thing you can do is zip it, open the zip & encrypt with the 'infected'

password, rename the zip 'Submissions' & sent it to AVSubmit@symantec.com

 

Subject: Submission

 

And in the body give as much detail as possible

 

Search for the file using 'Find Files & Folders' to get its exact location & you

should receive a reply from Symantec quickly with a reply if its know otherwise

max 48 hours with the results

 

--

Newbie Coder

(It's just a name)

 

 

"ElGordo" <ElGordo@discussions.microsoft.com> wrote in message

news:849628D4-09FE-47C4-8AC4-F011F8959017@microsoft.com...

> My av gives message "SL48E.TMP", do you want to run this program? I think i

> is in the sys32 folder. Is it a MS program and hence OK to run?

>

Guest ElGordo
Posted

Re: AV

 

 

 

"Malke" wrote:

> ElGordo wrote:

> > My av gives message "SL48E.TMP", do you want to run this program? I think i

> > is in the sys32 folder. Is it a MS program and hence OK to run?

> >

>

> No, it's not an XP program and no, it probably isn't OK to run.

>

> Go through these general malware removal steps systematically -

> http://www.elephantboycomputers.com/page2.html#Removing_Malware

>

> Include scanning with David Lipman's Multi_AV and follow instructions to

> do all scans in Safe Mode.

>

> http://www.elephantboycomputers.com/page2.html#Multi-AV - instructions

> http://pcdid.com/Multi_AV.htm - download

>

> When all else fails, run HijackThis and post your log in one of the

> specialty forums listed at the link above (not here, please).

>

> Standard caveat: If the procedures look too complex - and there is no

> shame in admitting this isn't your cup of tea - take the machine to a

> professional computer repair shop (not your local version of

> BigStoreUSA). Please be aware that not all local shops are skilled at

> removing malware and even if they are, your computer may be so infested

> that Windows will need to be clean-installed. Have all your data backed

> up before you take the machine into a shop.

>

>

> Malke

> --

> Elephant Boy Computers

> http://www.elephantboycomputers.com

> "Don't Panic!"

> MS-MVP Windows - Shell/User

> It is in C:\WINDOWS\Prefetch and is a 27Kb PF file

Guest Plato
Posted

Re: AV

 

=?Utf-8?B?RWxHb3Jkbw==?= wrote:

>

> My av gives message "SL48E.TMP", do you want to run this program? I think i

> is in the sys32 folder. Is it a MS program and hence OK to run?

 

All. tmp/temp files are safe to delete, and is recommended to do on a

regular basis.

 

 

--

http://www.bootdisk.com/


×
×
  • Create New...