Things about MSAntiSpyware

It uses the C:\Windows Temp Folder during operation. There are 2 or 3 files beginning with DFxxxx.

What got me into this is the fact that I found the C:\Windows\Temp folder LOADED with these files this morning. I could delete all but 3 of them.

the 1st one is created when the program is started ( or loaded at bootup )

A 2nd one is created if Real time Protection is enabled.

A 3rd one is created if you open the main program. (

When trying various ideas I find the these Tmp files should be wiped out

When you closed the main window one seems to go.
If I disable Real time a 2nd one goes.
If I shut the program down ( from the Systray ) the 3rd one should go.

Also I find that Real Time Protection is not always activated on a restart of Windows. Why ???

I have a couple of more things I would like to check so I will be back.

BillyBob

 

At 11:09 2 files

Restarted Windows

4 files 11:14

Restarted Windows

2 files at 11:14

2 files at 11:19

2 files at 11:20

That is how the C:\Windows temp folder got loaded.

Also does this say that the program is doing some checking on the way down ?

BillyBob
PS
I do not normally restart windows this freguently. But it appears that the temp folder got loaded over period of days.

BB

 

I have not yet found the other files you mention but the action/reaction of the DFxxxx.tmp files seems to be the same.

Different location but same results.

I can also delete all except the two newest ones.

That is what got me into this mess. I could not delete a couple in the TEMP folder. So I had to find what was putting them there.

And this new AntiSpyware was the lastest thing I had been fooling with.

But at least I now know where they are coming from.

BillyBob

 

Thank you Christer

Looks like you and I have the same results.

At least I now know more what/who is doing what to me.

BillyBob

 

billy, i love your paranoia. I would never notice that kind of thing, i treat my computer like my toaster, i turn it on and unless smoke comes out, it must be working fine.

I had 2 of them
32,768 ~DF852E.tmp
180,224 ~DF8AD4.tmp

They are both 'Compound Documents'. I couldnt find a cracker for this specific format, but its similar to a word doc, or an OLE file. Its like a ZIP file, a single file that contains several files. The big one has a bunch of GIF files in it, the little one is all binary data and icons.

 

I would not mind if there were only two ( 2 )

But I checked this AM and there are twelve of them ( 6 sets 0f 2 )

I did a bit of house cleaning last evening so I did restart the machine at least 4 times. And the latest ones was of course when I started the machine this morning.

So next time I will just stop the program from loading at bootup till I am finished houscleaning and makng new Restore points.

BillyBob