Page 1 of 2 12 LastLast
  1.    14 Aug 2017 #1
    Join Date : Feb 2016
    Posts : 16
    windows 10 pro

    Is this a genuine file or malware ?


    Hi,

    I noticed that my processor was working at 100% all the time.
    When i looked to see what was using al of the processor i found a process running named: g67b0.tmp.exe
    Google came with no results for this so i wondered if it is malware ?
    I closed the process and the processor came down to 40%.
    Also i noticed nothing not working after closing the process.
    I haven't rebooted the pc, but i asume the process wil start again on reboot..
    Anyone has any knowledge about this ?
    Thanks,

    Luc
      My ComputerSystem Spec

  2.    14 Aug 2017 #2
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,451
    windows 10

    Its almost certainly a trojen can you upload to virus tool and see what it says https://virustotal.com/#/home/upload

    Is there a service running with the same name?
      My ComputerSystem Spec

  3.    14 Aug 2017 #3
    Join Date : Feb 2016
    Posts : 16
    windows 10 pro
    Thread Starter

    Hi,
    It was a process...
    A filesearch on all my drives found nothing.
    And there's no service running with that name.
      My ComputerSystem Spec

  4.    14 Aug 2017 #4
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,451
    windows 10

    Did you delete the file or upload it its likely you may get more with a simliar name
      My ComputerSystem Spec

  5.    14 Aug 2017 #5
    Join Date : Feb 2016
    Posts : 16
    windows 10 pro
    Thread Starter

    After a wider search i found in windows/temp this file.
    I renamed the extention to .EX- so i hope it won't start at reboot.
    When i uploaded it to Virustotal it had a score of 14/64.
    So i suspect it not to be good...
      My ComputerSystem Spec

  6.    14 Aug 2017 #6
    Join Date : Aug 2016
    S/E England
    Posts : 4,476
    10 Home x64 (1709) (10 Pro on 2nd pc)

    Quote Originally Posted by Lucske View Post
    i found a process running named: g67b0.tmp.exe
    Google came with no results for this...
    Google comes up with a lot of results for <lots of other random strings>.tmp.exe and all of them seem malign. A scan with something like AdwCleaner would seem to be a good idea.
    https://www.malwarebytes.com/adwcleaner/
      My ComputersSystem Spec

  7.    16 Aug 2017 #7
    Join Date : Feb 2016
    Posts : 16
    windows 10 pro
    Thread Starter

    Hi,

    When i download adwcleaner and try to install it my system tells me that the signature is missing or corrupt and the manufacturer is blocked.
    I thought it may be better to download it using another browser bud IE, Chrome and Firefox give the same result .
    Any idea how to go on now ?

    Luc
      My ComputerSystem Spec

  8.    16 Aug 2017 #8
    Join Date : Aug 2016
    S/E England
    Posts : 4,476
    10 Home x64 (1709) (10 Pro on 2nd pc)

    Quote Originally Posted by Bree View Post
    Google comes up with a lot of results for <lots of other random strings>.tmp.exe and all of them seem malign. A scan with something like AdwCleaner would seem to be a good idea.
    https://www.malwarebytes.com/adwcleaner/

    Quote Originally Posted by Lucske View Post
    When i download adwcleaner and try to install it my system tells me that the signature is missing or corrupt and the manufacturer is blocked.
    If you downloaded AdwCleaner from the link I gave that should not happen. If you downloaded it from elsewhere, try again with the link I gave. It doesn't require installing, you just download it and run it. If it still doesn't run, most likely malware is blocking you from running it. Run Rkill first which will try to stop any malware processes that are blocking you. Then, without restarting, run AdwCleaner.

    https://www.bleepingcomputer.com/download/rkill/
      My ComputersSystem Spec

  9.    17 Aug 2017 #9
    Join Date : Feb 2016
    Posts : 16
    windows 10 pro
    Thread Starter

    I did download from the link in your message.
    Now i runned Rkill and after finishing it told me that i should be able to use the normal programs...
    Then i tryed again to download and install AdwCleaner .
    It still won't install because my system says the signature is corrupt or not valid.
      My ComputerSystem Spec

  10.    17 Aug 2017 #10
    Join Date : Jul 2016
    Crewe Cheshire
    Posts : 1,451
    windows 10

    Try this it doesnt fix anything but tells us whats the problem is so we can deal with it be sure to post BOTH results

    Please download and save FRST 64bit or FRST 32 bit to your Desktop.

    http://download.bleepingcomputer.com/farbar/FRST.exe

    http://download.bleepingcomputer.com/farbar/FRST64.exe

    Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

    Make sure that Addition option is checked.
    Press Scan button.
    It will produce a log called FRST.txt in the same directory the tool is run from.
    Please copy and paste log back .
    The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe).
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast


Similar Threads
Thread Forum
Is the RdrCEF.exe file in Adobe Acrobat Reader DC malware?
I am asking this because on all 5 of my PC's, when I am running Adobe Acrobat Reader DC to view a .pdf file, unless I have gone out of my way to rename and/or delete this file it uses a bleepton of CPU time. 10%+ on my E5-571-5552 computer which is...
Software and Apps
From Genuine to Pirated and Back to Genuine
I have a laptop with Windows 7 Home Basic OEM pre-installed, it was genuine and had COA on the bottom of laptop. Accidentally, at that time I was 12 years old, so I don't know about 'crack', 'hack', software counterfeit, etc. . Thus, I thought my...
Windows Updates and Activation
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 12:52.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums