Files a mystery! Help

The Temp file in windows is being filled with files (which when deleted in safe mode, re-create themselves) which cannot be opened. It says that the file is being used by another program. All files begin with CS. Is there a way to determine what program is using these files, so that I can track down what is generating them, or does anyone know what this might be? This started after a bogus message was forwarded through Yahoo by someone on the allowed list. None of the spyware or virus programs on my PC pick anything up! If anyone knows what I am dealing with or has any suggestions, it would be greatly appreciated.

 

http://forums.majorgeeks.com/showthread.php?t=35407
Visit this thread, and follow the steps outlined therein. Might help you quite a bit.

 

There are many programs that generate temporary files while running.

A good place to start would be with this thread READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan And Virus Removal

This will make sure your system is clean.

 

Ha! Way to post what I just posted, Shadow!

No biggie.... 'tis good advice.

 

I followed all of the instructions, scans turned up nothing. In safe mode the files are not there, but reappear when I reboot in normal mode. Also, I found three files in Windows that claim to be created November 19, 1617 at 6:57:32 PM. Please advise.

 

I am going to request that this thread be moved to Spyware.

 

- Download HijackThis 1.99.1

- Unzip the hijackthis.exe file to a folder you create named C:\Program Files\HJT

- Do NOT run Hijack This from the Desktop, a temp folder, or a sub-folder of C:\Documents and Settings, or choose to run it directly from the downloaded ZIP file.

- Before running HijackThis: You must close each of the following:your web browser, e-mail client, instant messenger, and programs like notepad, wordpad, MS Word etc. And any other unnecessary running programs.

- Run HijackThis and save your log file.

- Post your log as an ATTACHMENT to your next message. (Do NOT copy/paste the log into your post).