%temp%

Peter2

New Member
Power User
Messages
865
Location
MD
Win 8.1 64 byte
Occasionally I run this to clear the temp folder.
I noticed that the files shown in the attachment are persistent and when I try to delete them it says they are no longer located in the path shown.
I went to that path and they were there just like at %temp%. I still could not delete them. I opened one and with internet explorer and it took me to my homepage.
I have tried disc cleanup and 2 system restores.
I ran sfc which showed corrupt files but with DISM they were repaired.

After rebooting I ran %temp% and they are still there. They have 0 bytes and it seems they are just icons of what used to be files but that is a guess
 

Attachments

  • Untitled.png
    Untitled.png
    30.9 KB · Views: 97

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
Who cares? Those folders are being used by the system for whatever reason. You say they take up 0 bytes. Save yourself some grief and forget about them. If you do manage to get them deleted, what will you gain?

BTW, %temp% is a system variable that points to a folder location, not a command, so when you say you "ran %temp%" you really simply opened that location on your drive.
 

My Computer

System One

  • OS
    W10 Pro (desktop), W10 (laptop), W10 Pro (tablet)
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home built i7-8700K, Hp Envy x360 EVO Laptop, MS Surface Pro 7
    CPU
    3.7Ghz Core i7-8700K, 11th Gen Core i7-1165G7 4.7Ghz, 10th Gen Core™ i5-1035G4 1.1Ghz
    Motherboard
    ASUS TUF Z370-Pro Gaming, HP, MS
    Memory
    16G, 8G, 8G
    Graphics Card(s)
    AMD Radeon RX580, Intel Iris X Graphics, Intel Iris Plus Graphics G4
    Sound Card
    ATI High Definition Audio (Built-in to mobo)
    Monitor(s) Displays
    Dual Samsung U32J59 32 inch monitors, 13.3" display, 12.3" display
    Screen Resolution
    3840x2160 (Desktop), 1920x1080 (laptop), 2736x1824 Pro 7
    Hard Drives
    500GB ssd boot drive with 2 & 10TB Data (Desktop), 512GB ssd (laptop), 128GB SSD (tablet)
    PSU
    Corsair CX 750M
    Case
    Antec 100
    Cooling
    Coolermaster CM 212+
    Keyboard
    IBM Model M - used continuously since 1986
    Mouse
    Microsoft IntelliMouse
    Internet Speed
    665Mbps/15Mbps down/up
    Browser
    FireFox, MS Edge
    Antivirus
    Defender on all
    Other Info
    Retired in 2015 after working in the tech industry for 41 years. First 10 years as a Technician, the rest as a programmer/software engineer. After 1 year of retirement, I was bored so went back to work as a Robotic Process Automation Consultant. Retired for 3rd (and final) time in 2019.
I recovered with macrium(unnecessarily) and open the temp folder location. They were still there but this time contained files. I am leaving it alone unless I see a hundred or so and just delete what the system wants to.
Thank you for your help.
 

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
them are local temp's - they come and go as needed
 

My Computer

System One

  • OS
    Windows 3.1 > Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8700
    CPU
    I7
    Memory
    24 GB

My Computer

System One

  • OS
    Win 8.1.1 Pro x64
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo E525
    CPU
    AMD A4-3300M @ 2,0GHz
    Memory
    6GB DDR3 1333MHz
    Graphics Card(s)
    AMD Radeon HD 6480G 512MB shared
    Sound Card
    Creative Sound Blaster X-Fi Surround 5.1
    Screen Resolution
    1366x768
    Hard Drives
    WD 465GB
    Cooling
    Fusion Tweaker
    Keyboard
    Logitech K360
    Mouse
    Logitech M705
    Internet Speed
    50/50 MBps
    Browser
    Yandex
    Antivirus
    No AV & No Firewall
    Other Info
    Headphones: Sennheiser RS170
I have Office 2010 and am running 8.1.
I have been told by so many to leave that location alone and that programs are using the files so I will.
I do not understand the taskbar shortcut etc. as I am not skilled.
thank you
 

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
try again - TairikuOkami

I did not understand explanation below. Without damaging the recovery work I have done, knowing that many are suggesting I leave it alone, but knowing that those are the persistent files, could you please help me understand the information below that was part of your referral.
I am not a skilled user so need simple instructions. I wish to understand the directions but the words confuse me. I do not know what the task bar shortcut is, or menu item for Explorer for example. How do you provide credentials?
Thank you very much.
---------------------------------------

>>The OICE_XXXXXX-XXXXX-XXX folders have to do with Outlook attachments and their security descriptors.

If you are having trouble deleting them from your %TEMP% folder, close all open folders then right-click the taskbar shortcut or menu item for Explorer and choose Run as administrator. Acknowledge the UAC warning and provide credentials if asked. This will open Explorer with the elevated permissions you require to delete the folders/files. A quick jump to your temporary files folder can be made by typing %TEMP% into the address bar and hitting Enter.

You should now be able to delete anything that is not locked by an open process.
 

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
I deleted the oice files from this folder with Uncover and, with DISM, was able to run SFC successfully.
Now I have the files you see in the attachment in the temp folder and they will not remove themselves.
When I start to use Uncover as I did with oice files, it says it will remove them upon the next restart unlike oice files. which just deleted them.
Should I delete these? I ask because when I deleted the oice DISM had to clean up corrupted files for SFC to run successfully.
 

Attachments

  • Untitled.png
    Untitled.png
    26 KB · Views: 52

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router

My Computer

System One

  • OS
    Windows 10 Pro X64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Lenovo IdeaCenter K450
    CPU
    Intel Quad Core i7-4770 @ 3.4Ghz
    Motherboard
    Lenovo
    Memory
    16.0GB PC3-12800 DDR3 SDRAM 1600 MHz
    Graphics Card(s)
    Intel Integrated HD Graphics
    Sound Card
    Realtek HD Audio
    Monitor(s) Displays
    HP h2207
    Screen Resolution
    1680x1050@59Hz
    Hard Drives
    250GB Samsung EVO SATA-3 SSD;
    2TB Seagate ST2000DM001 SATA-2;
    1.5TB Seagate ST3150041AS SATA
    PSU
    500W
    Keyboard
    Wired USB
    Mouse
    Wired USB
    Internet Speed
    3GB Up, 30GB Down
    Browser
    SeaMonkey
    Antivirus
    Windows Defender; MBAM Pro
    Other Info
    UEFI/GPT
    PLDS DVD-RW DH16AERSH
As usual when I find a resolution post it. I used the path and users to find that Google was running and preventing the %temp%. It is now functioning as I have stopped all Google tasks in task manager.
 

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
Hello, I have what seems to be the same problem except one of my anti-malware programs has been bugging me like crazy saying there is a Trojan down loader in my local temp files. It tells me something like this "Runtime Error (at -1:0) dll:C:\Users\Danny\AppData\Local\Temp\is.'AlwaysRandomNumbersAndLettersHere'.tmp\itdownload.dll." I am extremely worried because this anti-malware program that I have called MalwareBytes, that has been detecting these intrusions and blocking them is on a trial and is about to expire. Also, when I enter chrome I recieve "etilqs_'RandomNumbersAndLetters'" and disappear when I exit.
 

My Computer

System One

  • OS
    Windows 8.1
A pro will likely jump in to help.

Meanwhile, no problem as MalwareBytesAntimalware or MBAM can expire and you can still use the free version as I do. It is just as effective.
You will not lose the detection as it will just reoccur with the next scan.
What do you do when MBAM detects this Trojan?
I would think it would quarantine it so you can then remove it using MBAM.
What is your operating system and what is your antivirus program?
Windows Defender or whatever your a/v program is should be run to see what it also finds and to be sure this is not a false [positive.
Please tell me your anti virus program.
There is also a free a/v scan at Kaspersky to see if it detects anything for corroboration.
Do you have an image of your operating system? If yes, you can recover a previous image. If not, regardless of the outcome here we should talk about the very real need for an imaging program. I use Macrium Reflect free and can walk you through it. Windows also has its own limited imaging program.
Please write back with answers to these questions and your findings and take one thing at a time. Do not do anything rashly. One thing at a time.
 

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
When MBAM detects the Trojan I go to the location it is originating from, which is my local temp files, there I find a few files such as HP Support Framework, jna, SoftwareUpdate_Temp, Temp, UCDebugger which are all folders. However, all these folders are empty. I also see some etilqs and random text documents with nothing written in them. However MBAM has not detected the Trojan or at least it persistently comes back. My OS is Windows 8.1 64 bit and my antivirus program is mostly IObit Malware Fighter and Advanced System Care 8. Honestly, I was surprised MBAM did not detect or remove of this Trojan even after I restarted my computer. Also, I'm not quite clear on what you mean on taking an image of my operating system.
 

My Computer

System One

  • OS
    Windows 8.1
MBAM is more for the malware that is very new and not yet detected by AV programs, it won't anymore detect malware that already exists for quiet some time, this is most likely the reason why MBAM doesn't detect this trojan.

An 'image' is another word for a backup.

I recommend, besides of MBAM, other programs that protect you from malware.
So far I know IObit Malware Fighter and Advanced System Care 8 don't have quiet a good reputation with protecting systems, more like breaking systems. I have quiet some experience with these programs and would call them adware as they have multiple times broken systems.
 

My Computer

System One

  • OS
    Windows 10 Pro
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Custom build
    CPU
    i5-6500 @3.20GHz
    Motherboard
    Gigabyte B150-HD3P-CF
    Memory
    16GB DDR4 2133 Crucial Ballistix Sport LT
    Graphics Card(s)
    MSI GeForce GTX 1060 GAMING X 6G
    Sound Card
    Built-in
    Monitor(s) Displays
    Liyama ProLite XB2483HSU-B2
    Screen Resolution
    1920 x 1080
    Hard Drives
    Crucial MX200 500GB & Toshiba DT01ACA300 3TB
    PSU
    Corsair RM550x
    Case
    Fractal Design Define S
    Cooling
    Cooler Master TX3 i
    Keyboard
    Func KB-460 (MX Red)
    Mouse
    Corsair Gaming M65 RGB
    Browser
    Google Chrome
    Antivirus
    Bitdefender Total Security 2017 + MBAM Pro + MBAE Pro
    Other Info
    Creative Sound Blaster Tactic3D Rage V2 headset
ax0 is right.
Besides his help I would suggest using another a/v program as MBAM detects malware more than trojans.
I thought you said MBAM detected the trojan.

I would remove IObit Malware Fighter and Advanced System Care 8.

Do you work behind a router? If you have a gateway there is a built in router you can set up but your own router is better. I can help you with that if you wish. Or if you wish to set up a router I will help you.

If so, Windows Defender, MBAM and Windows native firewall should be all you need. Defender is not perfect but does the job - you will get replies saying it is no good but time will tell. It has served me and many very well. Let Windows take care of Windows without involving 3rd parties that mess things up.

Imaging is like backing up but backing up usually involves files and folders where bundles/paquets are used. Imaging is usually used to copy/image an operating system using VSS -as I said I use macrium reflect and it has never failed me. If you drop a file, have virus, or need to fix your entire pc, just click a few buttons and your system is recovered to a point where all was well.

As far as your current situation is concerned, I hope another more skilled person can jump in to help you as virus removal is not my forte. I usually prevent instead of remove but it can happen to anyone.

If it were me I would do as I suggested above, first. Then enable Windows Defender and let it scan the pc.
I also told you to let Kaspersky[Google it} scan your pc to see what it finds. Then we can take steps to remediate issues once identified.

I know I have written a lot but do one thing at a time. let's get the system stable first then get it set up after that.
I am sure me, ax0 and others will get you on the right path.
 
Last edited:

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
As you both have suggested I have uninstalled IObit Malware Fighter and Advanced System Care 8. However, when I locate my control panel and select Windows Defender it responds with "This app has been turned off and isn't monitoring your computer." I have no particular idea how to turn Windows Defender on. I have also taken into account the Kaspersky free scan and the results were listed under "other" problems which lied mostly arounf internet explorer which I do not use at all. Also, I have failed to mention that I have Norton, do not particularly like it, however suggestions from my friends have kept me from uninstalling it, though I do keep it on silent mode most of the time. I now have Macrium Reflect as well but I would like if you could walk me through it as this is a new software I know little to nothing about.
 

My Computer

System One

  • OS
    Windows 8.1
seperate issues

We have to do one thing at a time. The first, in my opinion, is to Google the Norton uninstaller which removes Norton from the pc. Norton will complicate what we are trying to do. You need the uninstaller to remove it properly. Make a system restore point first and before you make any changes. I gave you the link to the tool below.
After you have done that please write back. Do nothing with macrium as that is down the road.
I also gave you the link to turn Defender on.
The first is Norton and the 2nd is defender.


https://www.google.com/url?sa=t&rct...h7p4_70JYFKf_07Pw&sig2=yUK_-Mw2vSfnusWi2DRIHg

https://www.google.com/url?sa=t&rct...ojpLaJ6ZVVMVuGtHg&sig2=V3tAw6dhisF1W-IBikCVcg
 
Last edited:

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
I have uninstalled Norton. However, the link you gave me to configure Windows Defender does not work because once I select Action Center there is no option saying Turn On NowScreenshot (1).png as this screenshot shows. So I'm really kind of stuck and I know this probably not your forte though but I'm just letting you know.
 

My Computer

System One

  • OS
    Windows 8.1
I have not used 8.1 for awhile but read this carefully and see what happens then write back please. If I remember correctly, I could swoop in from the upper right and type Defender or see the action center in the power task bar and enable Defender from it. See control panel for action center and make change there. Look to the left in action center for ways to do things such as enable security, enable Defender, or change action center settings. If you cannot enable it let me know and I will dig further before we go on. Let's get this resolved before we proceed.

Problems starting Windows Defender in Windows 8/8.1/10 - Microsoft Community

If necessary I will help you with SFC mentioned in the MS article - try all other first.

>>If you've previously uninstalled a third-party antivirus product (Avast, AVG, Norton/Symantec, McAfee or some other product), you might see a dialog that states that Windows Defender is turned off. In such case, either click Action Center icon in Taskbar Notification Area (aka System Tray) and click Turn on virus protection (Important) or Turn on spyware protection (Important), or open Control Panel (Windows Key+X has a nice shortcut), type action into Search field, click Action Center and then click one of the Turn on now buttons in Security section. Please note that in Windows 8 and 8.1, Action Center might have no red warning icon for several days after you've removed a third-party virus protection tool.<<

If successful with defenfder run:
https://www.google.com/url?sa=t&rct...hpLoCg&usg=AFQjCNHXGbPsfDQ5o8Ea_9lfFPVZQp-sIA

See the attachment for turning on Defender - you are running 8.1 correct? And you do not have any virus programs running b/c residual files in the registry from an inappropriate uninstall of an a/v system can prevent Defender from running.
You should have only MBAM at this point. You cannot just remove an a/v program - you need an uninstaller but don't get into Revo, IObit etc. Only if you still cannot install Defender, uninstall MBAM, enable Defender and reinstall MBAM free(do not click trial).
 

Attachments

  • Untitled.png
    Untitled.png
    134.3 KB · Views: 61
Last edited:

My Computer

System One

  • OS
    Windows 10 Pro x 64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8300, Dell Inspiron 15 R N5010
    Memory
    6 GB
    Graphics Card(s)
    Nvidia GE force 420
    Hard Drives
    1TB
    Browser
    Edge, Chrome
    Antivirus
    Defender, MBAM, Router
Back
Top