How to Remove TMP Viruses

By Thomas King

Updated September 28, 2017

Rogue anti-spyware programs are designed to acquire your credit card information.
i credit cards image by Aleksandr Lobanov from Fotolia.com

TMP is an executable file downloaded and used by the virus, Fake Microsoft Security Essentials Alert. The purpose of Fake Microsoft Security Essentials Alert is to scare you into downloading one of the following rogue anti-spyware programs: Major Defense Kit, Peak Protection 2010, Pest Detector 4.1, Red Cross Antivirus or AntiSpySafeguard. Fake Microsoft Security Essentials attempts to do this by flooding your computer with pop-up alerts telling you that your computer is infected. Note that the Fake Microsoft Security Essentials Alert removal steps detailed in this article apply to the Windows 7 and Vista operating systems.

End Processes

Press "Ctrl," "Alt" and "Delete" to open the Task Manager.

Click the "Processes" tab of the Task Manager.

Click "Show Processes From All Users" and then "Image Name" to view a complete list of processes in alphabetical order.

End the following processes. To end a process, right-click the process and select "End Process."

defender.exe antispy.exe tmp.exe

Close the Task Manager.

Delete Registry Values

Click "Start" and type "regedit" into the "Search" box and press "Enter" to open the Registry Editor.

Delete each of the following registry values from the left pane of the Registry Editor. To delete a registry value, right-click on the registry value and select "Delete." Note that deleting the incorrect registry value can cause significant system-wide errors.

HKEY_CURRENT_USER\Software\PAV

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run “tmp”

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce “SelfdelNT”

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”

Close the Registry Editor.

Delete Files and Folders

Click "Start" and then click on the "Search" box.

Search for and delete each of the following files and folders. To delete a file or folder, right-click on the file or folder and select "Delete."

UserProfile\Application Data\PAV\ UserProfile\Application Data\antispy.exe UserProfile\Application Data\defender.exe UserProfile\Application Data\tmp.exe UserProfile\Local Settings\Temp\kjkkklklj.bat

Restart your computer.

×