• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.
  • The forums have been upgraded with support for dark mode. By default it will follow the setting on your system/browser. You may override it by scrolling to the end of the page and clicking the gears icon.

Random .exe files generating in temp folder and drives

Joined
Sep 28, 2019
Messages
19 (0.01/day)
Location
iran gilan
System Name L I M A N
Processor i3 9100f
Motherboard ASUS H310 MK
Cooling Green Notus 200 PWM
Memory Team Group 2*4 2400Mhz
Video Card(s) MSI GTX 1060 Gaming X 6Gb
Storage SSD 60Gb Samsung HDD 1Tb Seagate Barracuda
Display(s) HP ZR22w
Case Green MAGNUM 2
Audio Device(s) Microlab Stereo
Power Supply Green GP530A-ES
Mouse TSCO
Keyboard Farassoo
Software Win 10 64Bit Ver1909
Hi guys
This .exe files also had cpu usage about 30 percent with random name for example one of them is bxta.exe in one of my drives
Sometime when im open my discord app on pc it has same cpu usage of 30 percent and when im close it one of these .exe files in temp resume that process by the way im turn off the hardware acceleration and try reinstall 3 times n same problem other hand the firewall some times my firewall ask Allow questions to me about these .exe file for public and private connections how can i slove this im really getting mad
 
What antivirus are you running?
 
Does it have a digital signature? Upload it to Virustotal and post the link here
 
any screenshot from task manager or folder where the file run?
 
i said before it run in temp and sometimes random hard drive partitions
these are new names .exe in temp folder winnwkntf.exe winwcqpd.exe
i dont have antivirus because i have some cracked games
 

Attachments

  • asdaf.PNG
    asdaf.PNG
    3.2 KB · Views: 753
  • sis.PNG
    sis.PNG
    40 KB · Views: 863
I have yet to see an Anti Virus that doesn't have an "Exclude File/Folder" function, even Windows Defender have it (even though it seems to forget from time to time), so no reason to run your PC without any protection, just exclude stuff you don't want it to mess with. This way it should still be able to pick up any random infected exe that spawns around in your file system. Also, it's a good habit to upload any *.exe with questionable origins to VirusTotal before running it :)
 
THERE'S YA PROBLEM.
You downloaded a virus. :laugh: :laugh: :laugh:
Probably correct.

A lot of cracks will tell you that they need to be excluded from AV because of a false positive: their behavior is similar to a trojan and will be picked up by AV. Unfortunately, sometimes it's more than just similar to malware...
 
i said before it run in temp and sometimes random hard drive partitions
these are new names .exe in temp folder winnwkntf.exe winwcqpd.exe
i dont have antivirus because i have some cracked games
Yup, virus. Is Windows Defender updated/working? If not, turn it on. If yes, seek a professional for help.
 
Yes this is a virus, it is likely a cryptocurrency miner using your hardware/electricity to donate itself some money. It may also be keylogging or tracking your network activity, and sending it back home for someone to hack and sell your accounts and CC info, etc. Think that's a bit much?
Well, sorry to say but it's a thing. It happens. A lot.

:) The first thing you should do is run AdwCleaner! :)

Use all the "Basic repair actions" in settings to reset your firewall and undo any back doors you may have now.
Those quick steps will do a better job than any AV you install. Although at this point I would recommend you ensure Windows Defender realtime protection is enabled and update Windows to v2004 if it hasn't already. (Look in the update section in settings).

Also, I'd seriously recommend changing any critical passwords like your email, steam account ($$$), banking/paypal, etc. Or better yet get a password manager like Dashlane or Lastpass and have it do that for you.

Anyway you almost certainly got that virus from a bad torrent. If you don't have a keen eye to tell which ones are fake with 100% certainty it's best not to risk it. If you pay attention and understand the details it's completely safe. Trusted uploader, expected size, upload date, etc.
If not... well you know.

There is one other way you could have gotten this. If you don't have a good ad blocker setup. I can't recommend uBlock Origin specifically enough. Especially with the Fanboy Ultimate filter. An ad blocker is probably the most important thing you can do to improve your quality of life full stop. lol
 
Last edited:
Reinstall windows without installing cracked games afterwards.
 
i have some cracked games

yea, thats the answer, one of some of your games that cracked contain virus or somehow malware like

uninstall the games and use antivirus to fix that, if it's bad you should consider reinstall your OS

now just pick one clean your pc without those cracked games or run those malware like but you have the games
 
Based on the screen shots, the "cracked" games are unlikely to be the problem. The "Internet Download Manager" seen in that list is far more likely to be the culprit.
 
Based on the screen shots, the "cracked" games are unlikely to be the problem. The "Internet Download Manager" seen in that list is far more likely to be the culprit.
usually IDM just using patch to bypass and not using background app, except he picked the wrong one and ruin his pc
 
the problem is the firewall because settings is off
thanks so much for these good replays
respact
 
Back
Top