Possable virus?

Robin-HoodRobin-Hood
edited January 2008 in Spyware & Virus Removal
Hi...A client of mine has a weird problem...In his "\Windows" directory ( he has winxp pro ) he keeps getting a SCECCC571.tmp. ( the only way to remove it was with "Unlocker". After removal, the file will re-appear within 1 sec. What i would like to know is :
1) Is this a virus?
2) Do anyone here know of a type of "monitor" program that can monitor the sceccc571.tmp file to see WHICH application actually creates this file?...I have used FileMon, but it tells me that "winlogon" has something to do with this...Also with Unlocker i could see that this tmp file has something to do with the "system"...I have scanned Winlogon but it seems clean. Like i said, it would be nice if there was a Utility around that could actually tell a person the CREATOR of a new file creation OR manupilation...
...hope someone can help? :)

tia

Comments

  • TroganTrogan London, UK
    edited January 2008
    Hi,

    The file itself is most likely fine, but lets check.
    • Go to VirusTotal
    • Copy and paste the following file path into the Search Box in the middle of the page:
    • C:\WINDOWS\sceccc571.tmp
    • Now, click on the Send File button
    • Save a copy of the Anti-Virus results. Post the results in your next reply.

    Here is some information on Temporary files
  • Robin-HoodRobin-Hood
    edited January 2008
    I just found the prob...it was Slysoft that checks every couple of seconds if their product is registered...Thanks for helping Trogan :)
  • TroganTrogan London, UK
    edited January 2008
    You're welcome! Glad you figured it out. :)

    Hope you stick around the forums.

    I'll mark this resolved.
Sign In or Register to comment.