The file .TT1.TMP.VBS is malware related.
You must delete the file .TT1.TMP.VBS immediately!
Delete the file .TT1.TMP.VBS without delay!
Kill the process .TT1.TMP.VBS and remove .TT1.TMP.VBS from the Windows startup.
Malware Analysis of .TT1.TMP.VBS
Full path on a computer: %TEMP%\.TT1.TMP.VBS
Detected by UnHackMe:
.TT1.TMP.VBS
Default location: %TEMP%\.TT1.TMP.VBS
Removal Results: Success
Number of reboot: 1
.TT1.TMP.VBS is known as:
Trojan.Fakealert
How to quickly detect .TT1.TMP.VBS presence?
![]( "Files")
Files:
Files:- %SYSTEMDRIVE%\SYSTEM VOLUME INFORMATION\_RESTORE{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\SNAPSHOT\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
- %SYSTEMDRIVE%\SYSTEM VOLUME INFORMATION\_RESTORE{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\SNAPSHOT\_REGISTRY_USER_USRCLASS_S-1-5-20
- %SYSTEMDRIVE%\SYSTEM VOLUME INFORMATION\_RESTORE{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\SNAPSHOT\_REGISTRY_USER_NTUSER_S-1-5-20
- %SYSTEMDRIVE%\SYSTEM VOLUME INFORMATION\_RESTORE{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP17\SNAPSHOT\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
- %TEMP%\.TT1.TMP.VBS