Office Docs and Excel files mysteriously converting to tmp files

noclav
noclav used Ask the Experts™
on
I experienced this twice this month with two different customers. What happens is certain folders with excell and word docs will be moved inside other folders and the files will be gone only some random character file.tmp The first incident happend on a synology diskstation DS213 Shared Drive where the only fix was to reset the Diskstation and restore from backup. The second incident was on a Windows Home server share.  Both computers are windows 7 pro 64 with office 2013. Im starting to think this is a bug with office 2013. I scanned for viruses and none found. Where do i start to resolve this?
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
TomMicrosoft ISV Partner

Commented:
Keep on looking for virus, this is not a Office bug.
Try to scan with Malwarebytes https://www.malwarebytes.org/

Author

Commented:
Have you seen this before? I wouldnt think a virus would pick only specific folders to mess with.  But im scanning now and will look up what each virus it detects to see if they do this behavior.
Microsoft ISV Partner
Commented:
Yes, I have seen this many times before.
So many differnt viruses out there, hard to keep track.
Make sure you do a complete scan.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Author

Commented:
Here is the MBAM and JRT log. maybe MySearchDial is doing this.
JRT.txt
mbam-log-2014-05-02--08-59-28-.txt
TomMicrosoft ISV Partner

Commented:
MySearchDial is a browser hijacking tool
Make sure you reboot and do a full scan again.

This infection should have been very visible for the user when browsing
TomMicrosoft ISV Partner

Commented:
What are symptoms and possible risks of PC Optimizer Pro virus:
It is a corrupt software/application.
It may spread through malicious websites with the help of Trojans
PC Optimizer Pro virus Will violate your privacy and put your system on risk
System performance will be slowed down.
Annoying warnings and alerts will appear on screen
You,ll be asked to buy its non-working full version
It may corrupt your registry and important system files
It can bring additional viruses from remote server
TomMicrosoft ISV Partner

Commented:
This PC has traces of beeing repaired on, so you don't know the full history here.
Using fake PC Optimizer Pro shows a unexperienced user trying to repair the PC

Author

Commented:
Optimizer Pro gets installed with the rest of the crap. Once you have one of these programs then the rest gets downloaded. I see Optimizer pro installed with conduit, mypc backup, and 24/7 help and other malware programs.

Author

Commented:
I will see if this happens again and update cause i did the removal with mbam and jrt.

Author

Commented:
well so far no issues. So i will have to agree that this is caused by a virus. Learn something new every day. I never thought a virus would pick certain folders.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial