How to Remove TMP Virusesby Thomas King ; Updated September 28, 2017
TMP is an executable file downloaded and used by the virus, Fake Microsoft Security Essentials Alert. The purpose of Fake Microsoft Security Essentials Alert is to scare you into downloading one of the following rogue anti-spyware programs: Major Defense Kit, Peak Protection 2010, Pest Detector 4.1, Red Cross Antivirus or AntiSpySafeguard. Fake Microsoft Security Essentials attempts to do this by flooding your computer with pop-up alerts telling you that your computer is infected. Note that the Fake Microsoft Security Essentials Alert removal steps detailed in this article apply to the Windows 7 and Vista operating systems.
Press "Ctrl," "Alt" and "Delete" to open the Task Manager.
Click the "Processes" tab of the Task Manager.
Click "Show Processes From All Users" and then "Image Name" to view a complete list of processes in alphabetical order.
End the following processes. To end a process, right-click the process and select "End Process."
defender.exe antispy.exe tmp.exe
Close the Task Manager.
Delete Registry Values
Click "Start" and type "regedit" into the "Search" box and press "Enter" to open the Registry Editor.
Delete each of the following registry values from the left pane of the Registry Editor. To delete a registry value, right-click on the registry value and select "Delete." Note that deleting the incorrect registry value can cause significant system-wide errors.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%UserProfile%\Application Data\antispy.exe”
Close the Registry Editor.
Delete Files and Folders
Click "Start" and then click on the "Search" box.
Search for and delete each of the following files and folders. To delete a file or folder, right-click on the file or folder and select "Delete."
UserProfile\Application Data\PAV\ UserProfile\Application Data\antispy.exe UserProfile\Application Data\defender.exe UserProfile\Application Data\tmp.exe UserProfile\Local Settings\Temp\kjkkklklj.bat
Restart your computer.
- photo_camera credit cards image by Aleksandr Lobanov from Fotolia.com