What is tmp2345.exe

PosterOfStuff · 03-16-2008, 01:48 AM

I hope this is the right forum

.

I got a friends Firewall up and running the other day (bigpond firewall from Telstra in Australia). And it came up with alerts it was blocking applications like tmp3456.exe or tmp7865.exe etc etc. Everytime I rebooted it would be another new numbered tmp.exe type file.

I can't find any information about what it is on the internet so I was hoping that someone here would be able to help me out.

I just really want to know what it is, and if its a virus/ad thingy then I can take steps to remove it.

Thanks in advance.

brekk · 03-16-2008, 03:56 AM

sounds like a virus to me. Any .exe without an obvious name should be considered BAD.

Xerrot · 03-16-2008, 09:37 AM

From this site

Quote:

tmp.exe is a process belonging to an advertising program by 123bar. This process monitors your browsing habits and distributes the data back to the author's servers for analysis. This also prompts advertising popups. This process is a security risk and should be removed from your system.

Remove the numbers from the program name, then google it. Since you say that it's a diferent number everytime, I assume it's doing that to trick weak antivirus. Hope that helps!

PosterOfStuff · 03-16-2008, 03:31 PM

Thanks guys, that helps alot. I didn't think to remove the number part from the name then search on that.

Nehrak · 03-19-2008, 10:36 AM

I had a couple of these found on my system the other day when I (finally) upgraded to Norton 2008. It was definitely reported as spyware. Make sure to run the full suite of AV and anti-spy/malware if you're having your firewall report this.

(And somehow I had also contracted a relatively new Trojan as well, and by new I mean late Feb. was when it was reported.)

lendarios · 04-22-2008, 09:02 AM

Enjoy your aids.

03-16-2008, 01:48 AM	#1 (permalink)
PosterOfStuff Registered User Join Date: Apr 2007 Posts: 149 -7 Internets	What is tmp2345.exe I hope this is the right forum . I got a friends Firewall up and running the other day (bigpond firewall from Telstra in Australia). And it came up with alerts it was blocking applications like tmp3456.exe or tmp7865.exe etc etc. Everytime I rebooted it would be another new numbered tmp.exe type file. I can't find any information about what it is on the internet so I was hoping that someone here would be able to help me out. I just really want to know what it is, and if its a virus/ad thingy then I can take steps to remove it. Thanks in advance.

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

03-16-2008, 03:31 PM	#4 (permalink)
PosterOfStuff Registered User Join Date: Apr 2007 Posts: 149 -7 Internets	Thanks guys, that helps alot. I didn't think to remove the number part from the name then search on that.

03-19-2008, 10:36 AM	#5 (permalink)
Nehrak Crankier than the Kong Join Date: Nov 2005 Location: DigiPen Posts: 875	I had a couple of these found on my system the other day when I (finally) upgraded to Norton 2008. It was definitely reported as spyware. Make sure to run the full suite of AV and anti-spy/malware if you're having your firewall report this. (And somehow I had also contracted a relatively new Trojan as well, and by new I mean late Feb. was when it was reported.)