Link to home
Avatar of noclav
noclav

asked on

Office Docs and Excel files mysteriously converting to tmp files

I experienced this twice this month with two different customers. What happens is certain folders with excell and word docs will be moved inside other folders and the files will be gone only some random character file.tmp The first incident happend on a synology diskstation DS213 Shared Drive where the only fix was to reset the Diskstation and restore from backup. The second incident was on a Windows Home server share.  Both computers are windows 7 pro 64 with office 2013. Im starting to think this is a bug with office 2013. I scanned for viruses and none found. Where do i start to resolve this?
Avatar of Tom
Tom
Flag of Norway image

Keep on looking for virus, this is not a Office bug.
Try to scan with Malwarebytes https://www.malwarebytes.org/
Avatar of noclav
noclav

ASKER

Have you seen this before? I wouldnt think a virus would pick only specific folders to mess with.  But im scanning now and will look up what each virus it detects to see if they do this behavior.
ASKER CERTIFIED SOLUTION
Avatar of Tom
Tom
Flag of Norway image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of noclav

ASKER

Here is the MBAM and JRT log. maybe MySearchDial is doing this.
JRT.txt
mbam-log-2014-05-02--08-59-28-.txt
MySearchDial is a browser hijacking tool
Make sure you reboot and do a full scan again.

This infection should have been very visible for the user when browsing
What are symptoms and possible risks of PC Optimizer Pro virus:
It is a corrupt software/application.
It may spread through malicious websites with the help of Trojans
PC Optimizer Pro virus Will violate your privacy and put your system on risk
System performance will be slowed down.
Annoying warnings and alerts will appear on screen
You,ll be asked to buy its non-working full version
It may corrupt your registry and important system files
It can bring additional viruses from remote server
This PC has traces of beeing repaired on, so you don't know the full history here.
Using fake PC Optimizer Pro shows a unexperienced user trying to repair the PC
Avatar of noclav

ASKER

Optimizer Pro gets installed with the rest of the crap. Once you have one of these programs then the rest gets downloaded. I see Optimizer pro installed with conduit, mypc backup, and 24/7 help and other malware programs.
Avatar of noclav

ASKER

I will see if this happens again and update cause i did the removal with mbam and jrt.
Avatar of noclav

ASKER

well so far no issues. So i will have to agree that this is caused by a virus. Learn something new every day. I never thought a virus would pick certain folders.