Program that should not be running

[Fahey]

alright theres a program called win52 or win53 with a letter D or C then its .tmp.exe
for example
win52D.tmp.exe does any1 know what this is. Is it a virus.

[sirholio]

I couldn't turn anything up on a web search, but do you get anything when you do a virus scan? Which software are you using for that?
http://www.trendmicro.com/hc_intro/default.asp might help as well in addition to others that are available.

[Fahey]

dont know what software it is. I used antivir and it picked nothing

[Fahey]

all those files are in c:\windows\temp\(win52.tmp.exe or what ever it is)
Can I delet all those temp files.

[sirholio]

I don't see why you couldn't. just check to see if they come back upon rebooting.

[Fahey]

tried that website every time it scans it gets to a certainent perent then reboots.

[Fahey]

found what starts them wmiprvse.exe starts those files dont know how to get removed tho.

[Monkey34]

ANY exe running from a temp file, or with a double file extention is a suspect malware or virus. Reboot into safe mode, and delete it. Run spybot, adaware, and antivirus. You might also try downloading another antivirus software and running that from safe mode to "double-check" ANTIVIR. Maybe "AVG"........I've run both on rigs before when I didnt want to pay for a antivirus program.

CCleaner is great for cleaning extra junk from your computer.

BTW: Dont mess with wmiprvse.exe........it's a valid system process needed by windows. It CAN however be jacked.