Prevx Research Division
A.TMP
Fraudulent Security ProgramFree PC Cleanup from Webroot
Use Webroot SecureAnywhere to remove A.TMP.
"Just when you thought it couldn't get any better or faster. The Webroot scanning engine is 'high octane' with a hidden nitrous oxide system. Bravo!!!" W. Lodzinski, SecureAnywhere User
Associated Malware Groups
The unsafe files using this name are associated with the malware groups:
- Fraudulent Security Program
- Cloaked Malware
- Malware Dropper
- Malicious Software
File Behavior
A.TMP has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- This process creates other processes on disk
- This Process Deletes Other Processes From Disk
- Executes a Process
- Executes Processes stored in Temporary Folders
- Creates new folders on the system
- Sets processes to start during user logon
- Injects code into other processes
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Writes to another Process's Virtual Memory (Process Hijacking)
- Copies files
- Registers a Dynamic Link Library File
- The Process is polymorphic and can change its structure
- This Process sends MIME Email
A.TMP has been the subject of the following behavior:
- Executed from Temporary Folders
- Created as a process on disk
- Executed as a Process
- Added as a Registry auto start to load Program on Boot up
- Has code inserted into its Virtual Memory space by other programs
- Registered as a Dynamic Link Library File
Country Of Origin
The filename A.TMP was first seen on Jun 4 2007 in the following geographical regions of the Webroot community:
- The United States on Jun 4 2007
- on Jun 20 2007
- Portugal on Mar 24 2008
- Israel on Mar 24 2008
- Spain on Apr 7 2008
- Singapore on Apr 7 2008
- Australia on Jul 17 2008
- Qatar on Feb 10 2010
- The United Kingdom on Apr 3 2010
Filesizes
The following file size has been seen:
- 470,528 bytes
- 68,496 bytes
- 1,970,824 bytes
- 40,960 bytes
- 90,624 bytes
- 54,784 bytes
- 404,480 bytes
- 1,069,056 bytes
- 188,379 bytes
File Type
The filename A.TMP is used by multiple object types including executable programs,Dynamic Link LIbraries.
Help the Webroot Community to fight cyber crime
We are always looking for ways to improve the quality and speed of research to help us protect you from malicious software and cyber crime.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.