bigbigpig
asked on
Unknown files in C:\WINDOWS\Temp growing out of control
I have some Windows Server 2003 machines and one of them has a file in C:\WINDOWS\Temp growing out of control in size. The file name is '9' (just a number, no extension) and grew to about 9gb in a short amount of time. There are other files similar on this server and a few of the other servers having names of just numbers and no file extensions (example: 3, 5, 7, 8, 10, 40, 60, 61, etc) but all others are OK in size... 0-400kb. When opened in notepad it just shows cryptic symbols but at the bottom of some I can read copyrights for Microsoft, Monotype, and Verisign. Can anyone tell me what is making this file and why it shot up in size? I can't run 'handle' on it because by the time I notice the file is growing the process already let it go. Thanks in advance.
Jay_Jay70
last tie i saw this it was a direty trojan, it went rampant through my network....get scanning!
ASKER
Scans using McAfee Virusscan 8.5 + Antispyware came back clean. All of the files in this directory that have a name with a number without an extension are cut off at 400KB or less except this one file that shot up to 9gb. Is there anything that logs to the \windows\temp directory? Trace, debug, anything?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
I recommend that you use CC Cleaner in conjuction with Speed up my pc. This is what i used in conjunction with shift delete to clear up unknown pc files. I delete them without question because i am confident that they are not needed. When you start up your pc, before the process loads (i.e. before the pc is ready to be used you need to shift delete the unknown files. Do this after you have run the registry cleaner and make sure you clear up all internet explorer temp files first too.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.