TRZ####.TMP WINDOWS SERVER 2008

**franbarberan** · **franbarberan** on 15th June 2011, 7:57 am

Good morning,
Sorry about my English because it is not very fluid, I have a problem with my windows server 2008, recently detected the virus Sality, i proceeded to clean it, after a month I've begun to see that some files disappear and are replaced by trz # # # #. tmp, antivirus (avast professional) do not just detect (this fully updated), I give step scan files from my pc, please help me, thanks in advance

FRANK

**Belahzur** · **Belahzur** on 15th June 2011, 6:26 pm

Hello.

Please download ComboFix

from BleepingComputer.com

Alternate link: GeeksToGo.com

Rename ComboFix.exe to commy.exe before you save it to your Desktop

Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools A guide to do this can be found here
Click Start then copy paste the following command into the search box & hit enter: "%userprofile%\desktop\commy.exe" /stepdel
As part of it's process, ComboFix will check to see if the Microsoft Windows Recovery Console is installed. This will not install in Vista. Just continue scanning, and skip the console install.
When finished, it shall produce a log for you. Please include the contents of C:\ComboFix.txt in your next reply.

**franbarberan** · **franbarberan** on 16th June 2011, 10:36 am

Hi,

I've tried to run tommy but is not compatible with windows 2008 server, exists another version compatible? maybe another program?, I need help, now I noticed that mostly affects large files, a greeting and I hope news

FRANK

**Belahzur** · **Belahzur** on 16th June 2011, 7:54 pm

Hello.
If it is indeed Sality, I would recommend reformatting, this infection is a file infecter and can't be repaired.

**franbarberan** · **franbarberan** on 17th June 2011, 10:02 am

can not be repaired? that is very hard .... no manual or any other process can do, is a functioning server and formatting is not feasible, thanks

FRANK