Associated Malware Groups
The filename is associated with the malware groups:
- Worm
- Cloaked Malware
- Malware Downloader
File Behavior
~TMPB.EXE has been seen to perform the following behavior:
- The Process is packed and/or encrypted using a software packing process
- Uses hidden browser windows to connect to web sites without telling you
- Creates system tray popups, messages, errors and security warnings
- Opens browser pop ups
- Runs Javascript code
- Creates, modifies or schedules batch jobs
- Adds a Registry Key (RUN) to auto start Programs on system start up
- This process creates other processes on disk
- Executes Processes stored in Temporary Folders
- This Process Deletes Other Processes From Disk
- Can communicate with other computer systems using HTTP protocols
- Executes a Process
- Visits web sites on your PC without you knowing
- Registers a Dynamic Link Library File
~TMPB.EXE has been the subject of the following behavior:
- Created as a process on disk
- Copied to multiple locations on the system
- Deleted as a process from disk
- Executed as a Process
- Registered as a Dynamic Link Library File
- Added as a Registry auto start to load Program on Boot up
- Executed by Internet Explorer
- Executed from Temporary Folders
Country Of Origin
The filename ~TMPB.EXE was first seen on Oct 21 2008 in the following geographical regions of the Prevx community:
- GERMANY on Oct 21 2008
- SPAIN on Nov 28 2008
- CANADA on Dec 5 2008
- NEW ZEALAND on Jan 13 2009
File Name Aliases
~TMPB.EXE can also use the following file names:
- ~TMPA.EXE
- ~TMPC.EXE
- 63585884.EXE
- 16E.TMP
- 6.TMP.EXE
- 6.TMP
- 278.TMP.EXE
- BI.EXE
- 14180585.GI
- 12602313.DAT
- 65735592.EXE
- ~TMPDB.EXE
- ~TMPDR.EXE
- 5.TMP.EXE
- 76.TMP.EXE
Filesizes
The following file size has been seen:
- 102,404 bytes
- 88,576 bytes
- 97,796 bytes
- 72,192 bytes
- 92,672 bytes
- 113,152 bytes
- 86,020 bytes
File Type
The filename ~TMPB.EXE refers to many versions of an executable program.
PCMag.com Editors' Choice Award Logo is a trademark of Ziff Davis Publishing Holdings Inc. Used under license.