Is this a genuine file or malware ?

Hi,

I noticed that my processor was working at 100% all the time.
When i looked to see what was using al of the processor i found a process running named: g67b0.tmp.exe
Google came with no results for this so i wondered if it is malware ?
I closed the process and the processor came down to 40%.
Also i noticed nothing not working after closing the process.
I haven't rebooted the pc, but i asume the process wil start again on reboot..
Anyone has any knowledge about this ?
Thanks,

Luc

Its almost certainly a trojen can you upload to virus tool and see what it says https://virustotal.com/#/home/upload

Is there a service running with the same name?

Hi,
It was a process...
A filesearch on all my drives found nothing.
And there's no service running with that name.

Did you delete the file or upload it its likely you may get more with a simliar name

After a wider search i found in windows/temp this file.
I renamed the extention to .EX- so i hope it won't start at reboot.
When i uploaded it to Virustotal it had a score of 14/64.
So i suspect it not to be good...

Lucske said:

i found a process running named: g67b0.tmp.exe
Google came with no results for this...

Google comes up with a lot of results for <lots of other random strings>.tmp.exe and all of them seem malign. A scan with something like AdwCleaner would seem to be a good idea.
https://www.malwarebytes.com/adwcleaner/

Hi,

When i download adwcleaner and try to install it my system tells me that the signature is missing or corrupt and the manufacturer is blocked.
I thought it may be better to download it using another browser bud IE, Chrome and Firefox give the same result .
Any idea how to go on now ?

Luc

Bree said:

Google comes up with a lot of results for <lots of other random strings>.tmp.exe and all of them seem malign. A scan with something like AdwCleaner would seem to be a good idea.
https://www.malwarebytes.com/adwcleaner/

Lucske said:

When i download adwcleaner and try to install it my system tells me that the signature is missing or corrupt and the manufacturer is blocked.

If you downloaded AdwCleaner from the link I gave that should not happen. If you downloaded it from elsewhere, try again with the link I gave. It doesn't require installing, you just download it and run it. If it still doesn't run, most likely malware is blocking you from running it. Run Rkill first which will try to stop any malware processes that are blocking you. Then, without restarting, run AdwCleaner.

https://www.bleepingcomputer.com/download/rkill/

I did download from the link in your message.
Now i runned Rkill and after finishing it told me that i should be able to use the normal programs...
Then i tryed again to download and install AdwCleaner .
It still won't install because my system says the signature is corrupt or not valid.

Try this it doesnt fix anything but tells us whats the problem is so we can deal with it be sure to post BOTH results

Please download and save FRST 64bit or FRST 32 bit to your Desktop.

http://download.bleepingcomputer.com/farbar/FRST.exe

http://download.bleepingcomputer.com/farbar/FRST64.exe

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
Make sure that Addition option is checked.
Press Scan button.
It will produce a log called FRST.txt in the same directory the tool is run from.
Please copy and paste log back .
The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe).