<div>
the tmp7f.tmp and MANY other files like it DO NOT show up in this folder.
</div>


<div>
On the server that the virus was loaded on I now get this warning from Trend<br />
<br />
Virus/Malware: TROJ_DROPPER.ERR<br />
Computer: SERVER1<br />
Domain: work<br />
File: C:\Inetpub\wwwroot\archive<wbr />s\RALEIGH-<wbr />VOLUNTEERS<wbr />.LOG0807 (postcard.exe)<br />
Date/Time: 7/24/2008 5:15:40<br />
Result: Quarantine<br />

</div>


<div>
Download and install MalwareBytes Antiwalware and update. &nbsp;Restart server in safe mode &nbsp;and run a disc cleanup as the infected files appear to be in a temp directory. &nbsp;Once this is done run the scan with malwarebytes<br />
<br />
Program is very good at removing infections and is a very quick scanner<br />
<br />
<a href="http://www.malwarebytes.org/mbam.php" rel="ugc">http://www.malwarebytes.org/mbam.php</a><br />
<br />
<br />
SmitRem is also a good/quick scanner at removing variances of Smitfraud infections(also run in safe mode)<br />
<br />
<a href="http://www.bleepingcomputer.com/files/smitRem.php" rel="ugc">http://www.bleepingcomputer.com/files/smitRem.php</a><br />

</div>


<div>
loiswalk,<br />
If you will follow the advice given by rpggamergirl in the first post, we can get a real view of the problem and give you specific advice.
</div>


<div>
just hit us today.... i can't find a thing to fix it.
</div>


<div>
loiswalk:<br />
<br />
You may be experiencing a variant of NOT WELL known keylogger that creates thousands of zero byte .tmp files. <br />
<br />
The previous version came from the netskyP trojan virus. They use a trojan and keylogger combination to watch what you are typing in. So, this may not be as low risk as you might think. The previous version created thousands of POS(xxx).tmp files in the system's root directory, where xxx is a sequential alpha numeric number. <br />
<br />
The previous version took advantage of system restore by making it a file that returns upon bootup. So, you have to disable system restore prior to cleaning the virus&gt; To clean the older version, I downloaded Vundoofix and ran that after disabling system restore. Disabling system restore and running vundoo fix may work for you.<br />
<br />
If this is your problem, I suggest you contact your AV manufacturer and ask them for a fix. I think this was either the NetskyP or troj_generic virus. 
</div>


<div>
The solution above may work too, but I know Trend finally came out with a fix that eventually worked as well. &nbsp;The virus too was redefined as something else... I believe very similar to what is posted above.
</div>


<div>
FWIW - the &quot;Asker&quot; has abandoned this question long ago - no sense posting to it expecting any kind of response.<br />
<br />
jrmjr8098 - be really careful about thinking that the A/V vendors have found any kind of 'cure'. <br />
For known infections, the real solution is as described by rpggamergirl.<br />
<br />
Without a close inspection of the actual files and processes, the user may end up only treating symptoms.<br />
<br />
/unsubscribe
</div>


<div>
<div class="content wysiwyg-content">
I have this malware on a PC and can't get rid of it. &nbsp;HELP!!!<br />
<br />
Virus/Malware: Mal_Naix-2<br />
Computer: FB00377<br />
Domain: Ncfoodbank.org<br />
File: C:\DOCUME~1\cheneyl\LOCALS<wbr />~1\Temp\tm<wbr />p7F.tmp<br />
Date/Time: 7/23/2008 17:17:11<br />
Result: Virus successfully detected, cannot perform the Clean action (Quarantine)<br />

</div>
</div>


I have this malware on a PC and can't get rid of it.  HELP!!!

Virus/Malware: Mal_Naix-2
Computer: FB00377
Domain: Ncfoodbank.org
File: C:\DOCUME~1\cheneyl\LOCALS~1\Temp\tmp7F.tmp
Date/Time: 7/23/2008 17:17:11
Result: Virus successfully detected, cannot perform the Clean action (Quarantine)


Malware Removal

Anti-virus software was originally developed to detect and remove computer viruses. However, with the proliferation of other kinds of malware, antivirus software started to provide protection from other computer threats. In particular, modern antivirus software can protect from malicious browser helper objects (BHOs), browser hijackers, ransomware, keyloggers, backdoors, rootkits, trojan horses, worms, malicious layered service providers (LSPs), dialers, fraud tools, adware and spyware. Some products also include protection from other computer threats, such as infected and malicious URLs, spam, scam and phishing attacks, online identity theft (privacy), online banking attacks, social engineering techniques, Advanced Persistent Threat (APT), botnets and DDoS attacks.