How to Remove TMP Viruses

Save

TMP is an executable file downloaded and used by the virus, Fake Microsoft Security Essentials Alert. The purpose of Fake Microsoft Security Essentials Alert is to scare you into downloading one of the following rogue anti-spyware programs: Major Defense Kit, Peak Protection 2010, Pest Detector 4.1, Red Cross Antivirus or AntiSpySafeguard. Fake Microsoft Security Essentials attempts to do this by flooding your computer with pop-up alerts telling you that your computer is infected. Note that the Fake Microsoft Security Essentials Alert removal steps detailed in this article apply to the Windows 7 and Vista operating systems.

End Processes

  • Press "Ctrl," "Alt" and "Delete" to open the Task Manager.

  • Click the "Processes" tab of the Task Manager.

  • Click "Show Processes From All Users" and then "Image Name" to view a complete list of processes in alphabetical order.

  • End the following processes. To end a process, right-click the process and select "End Process."

    defender.exe

    antispy.exe

    tmp.exe

  • Close the Task Manager.

Delete Registry Values

  • Click "Start" and type "regedit" into the "Search" box and press "Enter" to open the Registry Editor.

  • Delete each of the following registry values from the left pane of the Registry Editor. To delete a registry value, right-click on the registry value and select "Delete." Note that deleting the incorrect registry value can cause significant system-wide errors.

    HKEY_CURRENT_USER\Software\PAV

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0″

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0″

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "tmp"

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"

    HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%UserProfile%\Application Data\antispy.exe"

  • Close the Registry Editor.

Delete Files and Folders

  • Click "Start" and then click on the "Search" box.

  • Search for and delete each of the following files and folders. To delete a file or folder, right-click on the file or folder and select "Delete."

    UserProfile\Application Data\PAV\

    UserProfile\Application Data\antispy.exe

    UserProfile\Application Data\defender.exe

    UserProfile\Application Data\tmp.exe

    UserProfile\Local Settings\Temp\kjkkklklj.bat

  • Restart your computer.

Related Searches

References

  • Photo Credit credit cards image by Aleksandr Lobanov from Fotolia.com
Promoted By Zergnet

Comments

Related Searches

M
Is DIY in your DNA? Become part of our maker community.
Submit Your Work!