What creates svbf.tmp folder in Temp

Hi,

Every five minutes something creates two folders called "4 random character".tmp example auqj.tmp. These folders are zero byte - possibly because Norton stops them from progressing.

Does anyone know what creates these ?

Full background story on this at Malware Removal \ svchost detected by Sonar

Thanks very much
Terryv

 

Hi,

I have been through the recommended cleanup and analysis completely as shown in the previously referenced thread "Full background story on this at the thread Malware Removal \ svchost detected by Sonar".

Many logs of MGtools are included there. But we did not find the culprit.

The issue is ... with Norton on, it triggers on these file creations and then stops them. With Norton off - we do not know what happens , although Norton has, at times, noted an origin of 91.212.226.182 which traces to Zhirkov Russia. So it seems I have some sort of info gathering going on, using these temp folders to store ,then forward - but we cannot seem to trace it back from these files to the source, or see anything in any logs as to what is creating them, and from where ?

It is interesting that I cannot find anyone who seems to be experiencing the same issue ? It is happening every 5 minutes, whether on-line or off-line - two files created, Norton triggers, stops their activity.

Thanks very much
Terryv

 

Hi,

Finally gave up and reloaded Windows after reformat - all clear so far