TMP3.TMP.EXE - Dangerous
What you should do about TMP3.TMP.EXE:
Your PC may be infected. The presence of a file called TMP3.TMP.EXE is a possible sign of infection.
You should urgently check your PC to make sure it is not infected. The free version of Prevx CSI will scan your PC in less than two minutes and check for millions of spyware and malware infections including TMP3.TMP.EXE. Don't take the risk, check your PC now.
What we know about TMP3.TMP.EXE:
The filename TMP3.TMP.EXE was first seen on Jun 23 2007 in DENMARK. It has also been seen in the following geographical regions of the Prevx community:
- SPAIN on Nov 22 2007
- URUGUAY on Aug 2 2007
- The UNITED STATES on Aug 2 2007
- ITALY on Jul 27 2007
- The UNITED KINGDOM on Dec 6 2007
- HONG KONG on Jul 27 2007
- AUSTRALIA on Jul 27 2007
- FINLAND on Jul 27 2007
- NETHERLANDS on Aug 9 2007
- HUNGARY on Aug 9 2007
The most common file size is 79,536 bytes. But the following file sizes have also been seen:
- 62,976 bytes
- 78,528 bytes
- 67,584 bytes
- 84,480 bytes
- 76,012 bytes
- 217,581 bytes
- 125,049 bytes
- 128,212 bytes
The unsafe files using this name are associated with the malware group Trojan.Vundo.Some files using the name TMP3.TMP.EXE are also associated with the malware groups:
- ADWARE.FOTOMOTO.F
- TROJAN.GEN
- BHO.AML
TMP3.TMP.EXE has been seen to perform the following behavior(s):
- The Process is packed and/or encrypted using a software packing process
- This Process Creates Other Processes On Disk
- Executes a Process
- Writes to another Process's Virtual Memory (Process Hijacking)
- Registers a Dynamic Link Library File
- The process hooks code into all running processes which could allow it to take control of the system or record keyboard input, mouse activity and screen contents
TMP3.TMP.EXE has been the subject of the following behavior(s):
- Created as a process on disk
- Executed as a Process
- Executed from Temporary Folders
- Has code inserted into its Virtual Memory space by other programs
- Created as a new Background Service on the machine
- Deleted as a process from disk
- Executed by Internet Explorer
TMP3.TMP.EXE can also use the following file names:
- 68176523.SVD
- ¸
- TMPE.TMP.EXE
- TMP1AF.TMP.EXE
- TMP12.TMP.EXE
- TMPB.TMP.EXE
- TMPF.TMP.EXE
- TMP9.TMP.EXE
- TMP10.TMP.EXE
- TMP5.TMP.EXE
- TMP8.TMP.EXE
- TMP4.TMP.EXE
- TMPBD.TMP.EXE
- TMP1DD.TMP.EXE
- TMP14.TMP.EXE
- TMP15.TMP.EXE
- TMP47.TMP.EXE
- TMP1C3.TMP.EXE
- TMP27.TMP.EXE
- TMP7.TMP.EXE
- TMP45.TMP.EXE
- TMP5C9.TMP.EXE
- TMPE0.TMP.EXE
- TMP37.TMP.EXE
- 60937595.DAT
- TMP51.TMP.EXE
- TMP3B.TMP.EXE
- DELETE1.EXE
- TMPC.TMP.EXE
- TMP1A.TMP.EXE
- TMP39.TMP.EXE
- TMP6.TMP.EXE
- TMP14C.TMP.EXE
- TMPA6.TMP.EXE
- TMP56.TMP.EXE
- TMP16.TMP.EXE
- TMP444.TMP.EXE
- TMP463.TMP.EXE
- TMP46.TMP.EXE
- TMP67.TMP.EXE
- TMP3E.TMP.EXE
- TMP3F.TMP.EXE
- TMP2.TMP.EXE
- TMP2A6.TMP.EXE
- TMP13.TMP.EXE
- TMP52.TMP.EXE
- TMP125.TMP.EXE
- TMP13FE.TMP.EXE
- TMP1402.TMP.EXE
- TMP1406.TMP.EXE
- TMP140A.TMP.EXE
- TMPF7C.TMP.EXE
- NAUJ[1]
- TMP19.TMP.EXE
- TMPD.TMP.EXE
- TMP18C.TMP.EXE
- TMP28F.TMP.EXE
- TMP4B2.TMP.EXE
- TMP4C7.TMP.EXE
- TMP61.TMP.EXE
- TMP34.TMP.EXE
- TMP35.TMP.EXE
- TMP73.TMP.EXE
- TMPE4.TMP.EXE
- TMP21.TMP.EXE
- TMP257E.TMP.EXE
- TMP1CE.TMP.EXE
- TMP1BA6.TMP.EXE
- TMP1F87.TMP.EXE
- TMP2379.TMP.EXE
- TMP337E.TMP.EXE
- TMP43E2.TMP.EXE
- TMP44BF.TMP.EXE
- TMP4D0F.TMP.EXE
- TMP6162.TMP.EXE
- TMP6259.TMP.EXE
- TMP6506.TMP.EXE
- TMP6A17.TMP.EXE
- TMP71C6.TMP.EXE
- TMP750.TMP.EXE
- TMP7FA4.TMP.EXE
- TMP8D09.TMP.EXE
- TMP8E6C.TMP.EXE
- TMP924A.TMP.EXE
- TMP9C65.TMP.EXE
- TMP1BC.TMP.EXE
- TMP137.TMP.EXE
- TMP49D.TMP.EXE
- TMP5A49.TMP.EXE
- TMP5CC5.TMP.EXE
- TMPF3.TMP.EXE
- DC1.EXE
- TMP59.TMP.EXE
- TMP87.TMP.EXE
- TMP180.TMP.EXE
- TMP100.TMP.EXE
- TMP9F93.TMP.EXE
- 85428163.NAB
- TMP31.TMP.EXE
- TMP202.TMP.EXE
- 86060502.SVD
- TMP157F.TMP.EXE
- NJCAPCHA[1]
- TMP1D.TMP.EXE
- TMP33.TMP.EXE
- TMPEE.TMP.EXE
- TMP240.TMP.EXE
- TMP3C.TMP.EXE
- TMP5A.TMP.EXE
- TMP5FB.TMP.EXE
- TMPFF8E.TMP.EXE
- TMP2EF.TMP.EXE
- DPTRMAXAUC-580.PMS.EXE
- TMP6B.TMP.EXE
- TMPA.TMP.EXE
- TMP29.TMP.EXE
- TMP4F.TMP.EXE
- TMP336.TMP.EXE
- TMP338.TMP.EXE
- TMP1C7.TMP.EXE
- TMP1AE.TMP.EXE
- TMP7F3.TMP.EXE
- TMPF0.TMP.EXE
- TMP2EC.TMP.EXE
- TMP148.TMP.EXE
- TMPE3.TMP.EXE
- TMP219.TMP.EXE
- TMP22B.TMP.EXE
- TMP2A1.TMP.EXE
- TMPE6.TMP.EXE
- TMP6A5.TMP.EXE
- TMPA1.TMP.EXE
- TMP1F.TMP.EXE
- TMP26F.TMP.EXE
- TMP66.TMP.EXE
- TMP6D.TMP.EXE
- TMP1E0.TMP.EXE
- TMP2338.TMP.EXE
- TMP1CF.TMP.EXE
- TMPC9.TMP.EXE
- TMPCD.TMP.EXE
- TMP12B.TMP.EXE
- TMP1EF.TMP.EXE
- TMPA5.TMP.EXE
- 88941877.DAT
- TMP1C0.TMP.EXE
- 59388235.EXE
- TMP1E.TMP.EXE
- TMP91.TMP.EXE
- TMP1E1.TMP.EXE
- TMP113.TMP.EXE
- TMPC6.TMP.EXE
- TMP146.TMP.EXE
- TMP4B.TMP.EXE
- TMP11F.TMP.EXE
- TMP123.TMP.EXE
- TMP43.TMP.EXE
- TMP1.TMP.EXE
- TMP30.TMP.EXE
- 13571859.EXE
- TMP175.TMP.EXE
- TMP20.TMP.EXE
- 49107461.EXE
- TMP562.TMP.EXE
- TMP22.TMP.EXE
- TMPAD75.TMP.EXE
- TMP339.TMP.EXE
- TMPAB.TMP.EXE
- TMP1B.TMP.EXE
- TMP77.TMP.EXE
- TMP9D.TMP.EXE
- TMP17.TMP.EXE
- TMP4A0.TMP.EXE
- TMPD5.TMP.EXE
- TMP11.TMP.EXE
- TMP92.TMP.EXE
- TMP443.TMP.EXE
- DC8.EXE
- DC6.EXE
- TMP24.TMP.EXE
- TMP121.TMP.EXE
- TMP1C2.TMP.EXE
- TMP38.TMP.EXE
- TMP44D.TMP.EXE
- TMP2E.TMP.EXE
- TMP156.TMP.EXE
- DC62.EXE
- TMP7B.TMP.EXE
- TMP80.TMP.EXE
- TMP84.TMP.EXE
- TMP88.TMP.EXE
- TMP254.TMP.EXE
- TMP11A.TMP.EXE
- TMP2C2.TMP.EXE
- TMP1C8.TMP.EXE
- TMP1FF.TMP.EXE
- TMP129.TMP.EXE
- FFA_DN[1]
- TMP15C.TMP.EXE
- 03109261.EXE
- TMP2F.TMP.EXE
- TMP42.TMP.EXE
- TMP6F.TMP.EXE
- TMP14D.TMP.EXE
- TMP1B3.TMP.EXE
- TMP32.TMP.EXE
- TMP6E.TMP.EXE
- TMPDE3.TMP.EXE
- DC5.EXE
- TMP305.TMP.EXE
- TMP117.TMP.EXE
- TMP172.TMP.EXE
- DC63.EXE
- TMP1BE.TMP.EXE
- TMP1EC.TMP.EXE
- TMPB4.TMP.EXE
- TMP12C1.TMP.EXE
- TMP12C2.TMP.EXE
- TMP242.TMP.EXE
- TMP403.TMP.EXE
- DC2113.EXE
- DC2115.EXE
- TMP643.TMP.EXE
- DC2121.EXE
- TMP675.TMP.EXE
- TMP60A.TMP.EXE
- TMP886A.TMP.EXE
