Member Avatar for RondaB

I did a search for tmp files to delete them and there are over a million in my norton quaratine. How does it keep multipling? How do I get rid of it.

Thanks ahead of time

This is my HJT log


Logfile of HijackThis v1.99.1
Scan saved at 9:11:31 AM, on 8/30/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\ewido anti-spyware 4.0\guard.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Jamey\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.operamail.com/
F2 - REG:system.ini: Shell=
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

  • 2 Contributors
  • 3 Replies
  • 185 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by dlh6213

Dani AI

Generated

Brief expert summary and next steps based on the thread: has Norton showing an enormous number of .tmp entries in Quarantine and the Norton UI won’t fully open. ’s CCleaner tip helps ordinary temp files but won’t clear Norton's encrypted Quarantine. Two common causes are (a) a running program keeps producing infected/flagged temp files, or (b) the quarantine/history database or UI is corrupted and reporting huge/duplicate entries.

Recommended sequence (short, safe, in order):

  1. Inspect Norton’s Security History → Quarantine and Clear Entries from the product UI (that is the supported method for acting on quarantined items). (support.norton.com)
  2. If the Norton UI fails, reboot into Safe Mode and try the same Quarantine/History step from there (Safe Mode reduces interfering services). (lifewire.com)
  3. If Norton still won’t respond or the Quarantine won’t clear, run the official Norton Remove & Reinstall tool (Advanced Options → Remove Only) to remove corrupted components, restart, then reinstall/update Norton. This preserves a clean quarantine state. (support.norton.com)

Additional notes tied to the HijackThis log: the system shows multiple real‑time engines (Norton + NOD32 + ewido guard). Running more than one real‑time AV can create conflicts and repeated detections/quarantines; remove or disable redundant real‑time products before re-scanning. (support.avast.com)

After Norton is repaired/removed and reinstalled, run an independent on‑demand scanner (example: Malwarebytes Threat Scan) to catch anything Norton might have missed or that’s repeatedly reappearing. Quarantine entries include “source” info in Security History — use that to identify which program is creating the .tmp files (mail client, browser add‑on, installer, or malware). (help.malwarebytes.com)

Cautions: don’t manually delete Norton program files or the Quarantine folder; use the product UI or the official removal tool. If the Quarantine immediately repopulates after removal, consider offline scanning or specialist removal help and back up important data first.

Recommended Answers

All 3 Replies

Member Avatar for dlh6213

There is also a program called CCleaner () that should remove most, if not all, of your temporary files (and other garbage) without the need to search. I'd try it first and see if it gets the Norton stuff, if not follow the instructions here:

Member Avatar for RondaB

Thanks for your reply . I have ccleaner and it didnt get them . I have have went as far as to try to delete the whole quarantine file. Didnt work though.

I keep trying to get it to open in norton but it starts but never does. Any ideas?

Member Avatar for dlh6213

Try it in Safe Mode.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.