Prevx Research Division
1C.TMP
Malicious SoftwareFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove 1C.TMP.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- Malicious Software
- Malware Dropper
File Behavior
1C.TMP has been seen to perform the following behavior:
- Executes a Process
- Registers a Dynamic Link Library File
- This Process Deletes Other Processes From Disk
- This process creates other processes on disk
- Copies files
- Injects code into other processes
- This Process sends MIME Email
- Creates or uses a background service to access the Internet using HTTP protocols
- Performs DNS look ups to resolve URL IP addresses
1C.TMP has been the subject of the following behavior:
- Created as a process on disk
- Created by processes which appear to be checking for interception by security products
- Registered as a Dynamic Link Libray (DLL) File
- Registered as a Dynamic Link Library File
- Executed as a Process
- Copied to multiple locations on the system
- Deleted as a process from disk
- Created as a new Background Service on the machine
- Loaded and Executed as a System Driver File
Country Of Origin
The filename 1C.TMP was first seen on Jun 5 2007 in the following geographical regions of the Webroot community:
- The United States on Jun 5 2007
- Europe on Apr 18 2008
- Australia on Jul 17 2008
- The United Kingdom on Dec 26 2009
- Brazil on Jan 19 2010
- Thailand on May 10 2012
File Name Aliases
1C.TMP can also use the following file names:
- LLH.DLL
- 3.TMP
- 5.TMP
- A.TMP
- 1D.TMP
- 21.TMP
- 20.TMP
- 26.TMP
- 1A.TMP
- 10.TMP
- 1B.TMP
- 1E.TMP
Filesizes
The following file size has been seen:
- 85,848 bytes
- 28,672 bytes
- 417,792 bytes
- 24,576 bytes
- 299,866 bytes
- 1,069,056 bytes
- 90,620 bytes
File Type
The filename 1C.TMP is used by multiple object types including executable programs,Dynamic Link LIbraries,objects.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.