Log in

View Full Version : Very Large Unknown File in Temp Folder


Couchcarrot
Oct 18, 2008, 12:34 AM
Is anyone familiar with this file: WFV6.tmp

I regulary clean out the temporary and prefetch files from
My system, but several days ago the above file appeared in
The folder "temp" which is accessed from the "Run" command
On Windows XP Home Edition. It's not in the one "%temp%."

I wouldn't be so concerned, but it is a large file, 35.3 MB, and
I don't know where it came from. I've googled it, and tried to
Find it at a website that is a process library resource, to no
Avail. I have McAfee Virus Scan, and keep it updated. This
File cannot be deleted.

I would appreciate any info.

Clough
Oct 18, 2008, 12:43 AM
Hi, Couchcarrot!

Have you downloaded any programs during the past several days or even week? This sort of thing could be a virus, but then again, maybe not.

I once had a virus that was in a folder that kept getting bigger and bigger. Basically, it was filling up my computer with crud, and the used space on my hard drive was increasing by alarming amounts!

I remembered when things started happening that weren't quite right, did a search for certain dates, and found the folder. I used Eraser to erase it. No problems then. I don't know that this would work with any virus, though.

Do you have any anti-virus software installed on your computer?

Thanks!

Couchcarrot
Oct 18, 2008, 11:51 AM
Do you have any anti-virus software installed on your computer?

Thanks for a response. In answer to your above question: McAfee Virus Scan
Is an anti-virus program that also includes a personal firewall. I scanned
This file individually when I first found it, and McAfee didn't recognize it as
A threat. I find it strange, though, that no one else has googled it, if anyone
Else has found it on their machine, and processlibrary.com has no record of it.

Maybe one of the technology experts might answer it on this website
Eventually. It bugs me that it's so big, and when I right-clicked its icon
And checked out its "Properties," it said it opens with "Unknown Application."
To me, that is a red flag.

Couchcarrot
Oct 18, 2008, 12:06 PM
Guess what, Clough?

Almost immediately after I responded to your reply on the above topic,
The above file disappeared from my "temp" folder and was replaced with
One with the name WFVA75.temp. It shows that it has "0" kb.

I don't believe that this is a coincidence, since the previous one,
WFV6.temp with 35.3 MB, has been there for about a week.

This makes me think someone out there is monitoring my computer.
And I thought my life was boring!!

farnhamg
Oct 20, 2008, 03:44 AM
Hi

I also have this - exactly the same circumstances, I can't delete it in the normal way - i.e. right click "delete" any ideas how to get rid of it and check security. I also use Mcafee
Thanks

Couchcarrot
Oct 20, 2008, 11:16 AM
Hi, Farnhamg:

Do you also have all those files in your temp folder that begin sqlite_
With a lot a strange letters and numbers after it? I found out that those
Are definitely from McAfee from another website. These "sqlite_" files can be
Deleted, as long as you delete only ones from previous dates, other
Than a current date.

Also, after I had posted a second response to Clough about the name
Changing to include the number 75, with "0" kb, the name changed again
To WFV8.tmp with 35.4 MB. This is an increase in size. Since that it has
Changed from WFV8.tmp to WFV2.tmp, and with each change, the size
Of the file remains 35.4 MB. Do the numbers after WFV change on yours?
Mine never did, until I contacted "helpdesk" about it. It changed almost
Immediately, after having stayed the same for about a week. Strange
Coincidence, huh?

McAfee has a website where you can supposedly have live chat for free
With a technician. Good luck in tryng to get the Download Chat link to
Work. It was a dead link for me. I ended up using their email option,
And I got a return email that only gave me a copy of my question. If you
Call them by phone, you have to pay by credit card. I'd rather go ahead
And buy another antivirus product than pay for an answer. I had never
Used McAfee before installing it about two months ago. On another website,
A participant was going nuts, because he or she thought the "sqlite files" they had
(they also used McAfee) were viruses.

invisibleman_productions
Oct 21, 2008, 05:46 AM
The other places I have seen the instance of the file WFV8.tmp is on a bleeping computer thread (http://www.bleepingcomputer.com/forums/index.php?showtopic=170367&st=0&p=950676&#entry950676)

On prevx (http://spywaredlls.prevx.com/RRAIGH6943253/FN896F9C98.DLL.html)it shows as it's a Microsoft corp file

Run an online virus scan (http://spywarefighter.blogspot.com/search/label/ESET%20Online%20Scan) to be sure

And then run CCleaner (http://www.ccleaner.com/) a freeware system optimization and privacy tool. (http://spywarefighter.blogspot.com/2008/06/free-clean-up-tools.html)

If you need more assurance

1. Run Malwarebytes Anti-Malware
(http://spywarefighter.blogspot.com/2008/06/malwarebytes-anti-malware.html)
2. Run Superantispyware
(http://spywarefighter.blogspot.com/2008/06/superantispyware-home-edition-free.html)
3 . Run a complete scan with Dr. Web CureIt (http://spywarefighter.blogspot.com/2008/06/dr-web-cureit.html)

Couchcarrot
Nov 2, 2008, 05:31 PM
I finally located information on these files today at the link below. I never
Received any response from McAfee Anti-Virus by using their Customer
Support website, after three weeks of waiting for some info.

https://knowledge.mcafee.com/SupportSite/dynamickc.do?sliceId=SAL_Public&command=show&forward=nonthreadedKC&externalId=616650

The only way to safely get rid of the "WVF*.tmp" files which keep
Getting larger and larger would be to completely uninstall McAfee,
As they are used in McAfee's scanning process. You'd think they
Would want to reassure their customers by telling them that ASAP.

Clough
Nov 2, 2008, 06:28 PM
Hi again, Couchcarrot!

If you would like to give Eraser a try, it's available on the following link.

http://www.heidi.ie/node/14

The version that I have of it is free, and I think that all the downloads on the link above are free.

Thanks!

Couchcarrot
Nov 2, 2008, 07:55 PM
Hi, Clough!

I have bookmarked the website for Eraser that you provided to
Possibly use in the future or whenever I switch to a new computer.

At this point, I'm very hesitant to erase the files which my Anti-Virus
And Firewall software use to do their jobs. If I do that, I'd probably
Be inactivating their service. This file is now at 38.3 MB, three
More megabytes than when I first inquired about it. I have nine
More months left on the subscription I purchased in August.
If it continues to grow proportionately for nine more months,
I'll just have to replace it with the brand I used to use. One of the
Suggestions on their Knowledge Base was to purchase more memory
To accommodate them... (HAH)

Thank you for the link.

DoniaBadrakhan
Feb 16, 2009, 07:56 AM
Can't delete WFV6.tmp file please its very big temp file 53.5 mg please help how to delete

Couchcarrot
Feb 16, 2009, 09:33 AM
To: DoniaBadrakan

You won't be able to delete this file at all, as long as you have McAfee Anti-Virus
Installed. Also, it will get even larger every time it updates itself or you update
It manually. In my original post question, it was 35.3 MB; now, it is 55.1 MB.

The good news is that you can delete the sqlite___ files that are part of the
Same anti-virus system. Hold you pointer lightly to each one for a few
Seconds and you will see a dark area below it with info including a date.
As long as the date isn't the current date, you can delete them. Don't
Let them continue to add up, or you'll have pages and pages of them.

You should also know that if you want to uninstall the software, you have
To contact McAfee either by phone or online, or they will continue to renew
Your subscription at its expiration and bill you for it. I imagine that
After a few years of a file that gets MBs bigger every few weeks, you
Might have to buy another computer or additional memory to accommodate
It. I have no intention of doing so. I forgot to mention that the file changes
Its name frequently. The only part that remains the same is the WFV. Mine
Right now is WFV8.tmp, but you can always locate it by the size. The sqlite__
Files are the small ones.

jamesbraken
Mar 8, 2009, 11:37 PM
Boot your computer in the safe mode with net working then try to delete this file because in the normal mode might be used by some of programs so, sometimes it's not deleted. Please go through this step then scan your computer in safe mode.

Helljack6
Mar 27, 2009, 01:01 PM
Keep it Clean and Running Mean - Helljack6.com (http://www.helljack6.com/clean.html)

Helljack6
Apr 8, 2009, 06:36 AM
It could be a virus I am advising to you that you should scan your computer with smitfraudfix update thae software and scan your computer with it but before scanning create restore point

SusanRay998 and JamesBraken, it is NOT a virus, stop throwing out the pat response to scan with smitfraudfix and create a restore point or scan your computer in safe mode. Maybe the both of you need to read this - Keepin' it Clean - Helljack6.com (http://www.helljack6.com/clean.html)

Files created in the %temp% location are created by the system for whatever purpose it needs at that exact moment. In the case of the file mentioned, it is a *.tmp file for McAfee created and used as a buffer for McAfee's real time protection, very similar to a tiny pagefile.

IF the original poster wants to delete the file, the already suggested program or an alternative such as File Unlocker 1.8.7 will remove the file in normal mode.

ITstudent2006
Apr 9, 2009, 08:23 AM
Couchcarrot, why would you disagree with that. He said exactly what you said in your reddy. Security Software does create temp files as does a lot of programs. GEEZ. Itchy fingers

Helljack6
Apr 9, 2009, 08:41 AM
Couchcarrot, perhaps you need to re-read what I wrote, specifically, "...in the case of the file mentioned, it is a *.tmp file for McAfee created and used as a buffer for McAfee's real time protection, very similar to a tiny pagefile."

What part of that didn't you understand me to say EXACTLY what you stated in your disagreement?

Couchcarrot
Apr 10, 2009, 12:10 PM
Couchcarrot, perhaps you need to re-read what I wrote, specifically, "...in the case of the file mentioned, it is a *.tmp file for McAfee created and used as a buffer for McAfee's real time protection, very similar to a tiny pagefile."

What part of that didn't you understand me to say EXACTLY what you stated in your disagreement?

This is due to the 5300 AV-Engine.

The 5300 Anti-Virus (AV) Engine improves in-memory DAT file usage and overall scanner performance.

New tmp files are created on the host system after upgrading to the 5300 AV-Engine. These are named WFV***.TMP files. Their location depends on the system and user temp folder definitions of the host Operating System.

• When the hosting process ends normally (for example, McShield is stopped as part of an update or the On-Demand scan finishes) then the WFV***.TMP file is deleted.
• If the hosting process ends abnormally (for example, if the McShield process or On-Demand Scan process is terminated) then the WFV***.TMP file will remain in the temp folder until the next time the process is reloaded. Then any orphaned copies are deleted and one new copy is created for the new scan process.
For example:
• McShield process is terminated. WFV***.TMP remains in c:\Windows\Temp
• McShield process is restarted. The orphaned WFV***.TMP is deleted and a new copy is created.