windows temp folder

catsonic

can i delete these? I seem to have a virus in one and when i try to delete it it trys telling me it might be a system folder, but it is in the temp folder so cant see how it can be!!

LincsLad_3

Do not delete the folder itself, but delete all the files in the folder.

You will probably have to do this in Safe Mode as one or more of the files will be in use in Windows 'normal' mode.

How to boot into Safe Mode.

Ratzz

Hi,

Where exactly is the folder? There are many temp folders, and it would be helpful to know which one you have a virus on.

Also, there is a program called "ccleaner", http://www.ccleaner.com/ that will delete all temporary files on your PC and clean registry entrys that is pretty good. Its also freeware.

HTH
Simon

catsonic

hi the file im trying to delete is se.dll. it seems to be a pig to get rid of and i cant understand any of the instructions to get rid of it.

At the mo i have resorted to using firefox as my primary internet thingy cause it dont seem to afftect that just internet explorer.

It was in windows temp folder i deleted it from there and then it appeared in the restore folder got rid of that then it was back in the temp folder and so on and so on!! lol

justpaper

turn off ur system restore,


Control panel > System > system Restore (tab)

then boot back in safe mode and del all the files in the temp

this file maybe running a trojan with out u knowing

andy88_2

It loads on startup, which is why justpaper suggested safe mode.

Look it up on Google; it sounds awkward

catsonic

hi ive tried doing the turning of restore but it dont make any difference and restarting in safe mode and doing all the virus scans and all that lot.

i did google it andy and i now am totally confused!! lol have no idea how to get rid of it!!

as long as i cant pass it along then im gonna just leave it alone until hubby decides to format and use firefox!! it dont seem to affect that.

thanks for the advice.

justpaper

catsonic i can understand it is getting confusing as it is a long process too remove it,.

ill just ad this here just incase u want to have a go,..


downloadhijackthis run it and click scan then it should give u a output of whats infected.code that turns se.dll on at start up check all the ones u see below

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://c:\windows\TEMP\se.dll/sp.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant =about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =res://c:\windows\TEMP\se.dll/sp.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank

O2 - BHO: (no name) - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - (no file)

O4 - HKLM\..\Run: [sp] rundll32 C:\WINDOWS\TEMP\SE.DLL,DllInstall

O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -ttp://ak.imgfarm.com/images/nocache/funwebproducts/ei-2/FunBuddyIconsFWBInitialSetup1.0.0.8-2.cab

then click Fix checked

then delete se.dll

c:\windows\TEMP\se.dll

catsonic

thanks justpaper!! thats the first time that has looked doable!! lol

I did what you said but its still here!!

some of the things i couldnt find or was slightly different so didnt dare delete them. maybe thats what i did wrong.

Im doing another virus scan now not that im expecting anything different! lol

webhamster

switch off system restore , reboot in safe mode.(remember to switch bakc on later or you could end up with an unusable pc).

Right click on your hd , my computer.Select the main hd then tools , cleanup , defrag , scandisk , choose cleanup although you can do the rest later.

Use adaware se , its free download do a google , reboot , once again start up in safe mode.

Install spysweeper (from webroot company) , run that , reboot in safe mode.

That should have removed most malware , just in case go to the webiste of trend micro housecall , its an online virus/trojan checker and run it.If your clear switch back on restore.

Get the microsoft security updates.

justpaper

uninstall IE too as ur using firefox u dont need it anyway then do what i said again,. and remember to do it all in safe mode