Help with unknown software filling up Temp folder

[Vendetta]

I have a folder called nCoreTMP located at C:\Users\MyNAME\AppData\Local\Temp that gets FILLED with files called nCoreNDB.1 through 1003 and is 185MB HUGE each.

Anyone know what the heck this it? I've done disk cleanup and now my C drive is LOW on space again. Temporary files in the Disk Cleanup shows that there are 238 GB that I can gain by deleting.

Thanks for the help.

 

[bbinnard]

Files in TEMP can be deleted when there are no programs running. As to what is creating the files - that's problematic. Software from Adobe and Apple likes to create lots of files on your system. You can Goodle the file name and see what that shows. or open a file manager pointing to the TEMP folder and then run different software until you see what is creating the files.

 

[Forz19]

All files in Temp folder are there to be deleted . If you can't then try Using CCleaner (as admin) or change permissions of Temp folder. And Googling it produces only two relevant results, one on this forum (this thread) and this one,

Hard Disk Losing Space

 

[Britton30]

Upload one of them to https://www.virustotal.com/ and see if it is a virus or other malware.

 

[Vendetta]

I deleted the entire folder, but once again, it's filling up again with the same junk files. I can't upload it to that site because each file is 187MB large. Did a search and doesn't seem anyone know what that is yet. Fustrating...

UPDATE: So far what I've done to remedy this crap folder is delete everything in the nCoreTMP folder, but these 3 files, so the folder stop downloading new ones.

nCoreNDB.1
nCoreNDB.386
nCoreNDB

I also renamed all 3 with the word BLOCK after them just to mess it up some more.

nCoreNDB.1BLOCK
nCoreNDB.386BLOCK
nCoreNDBBLOCK

 

[HammerHead]

Ncore

Look in msconfig (type at start) and look for something in startup that could relate to "ncore". If found disable.

Start task manager and look to see where the activity is coming from. If it is writing files it should be showing activity. If identified stop it from running and observe.

 

[Vendetta]

Forgot to mention that everytime you delete, it downloads the same files again, but even bigger.

 

[brewfan9]

Stop Sign AV

Hello all,

This is failed AV updates from "Stop Sign AV".

Uninstall "Stop Sign AV" Products
Delete the TEMP files located in:
C:\Documents and Settings\Larry Mohns\Local Settings\Temp
&
C:\Documents and Settings\Larry Mohns\Local Settings\Temp\sstemp

Scan your Computer for root kits:
Kaspersky TDSSKiller 2.8.7 - CNET Download.com

Scan For Virii: (Malware bytes free AV for home use)
Malwarebytes Anti-Malware - CNET Download.com

Reinstall "Stop Sign AV" (Assuming you use it)

Enjoy,
Eric

 

[A Guy]

Do you game?

Steam Community :: Ncore :: Games

A Guy

 

[whs]

Have a look whether there is scheduled task with a name like nCoreTemp. Open an elevated command prompt and run this command

schtasks

See whether there is anything in the list that resembles the filenames.

 

[Vendetta]

I don't game and I think Eric is right, it is StopSign AV that was causing the problem. I've yet to see the folder return after uninstalling it.

What's everyone's view on using the Windows Defender?

 

[A Guy]

Windows Defender in Windows 7 is it's antimalware program, not an antivirus program like it is in Windows 8. Frankly I have it turned off and have both Malwarebytes and Superantispyware as my antimalware programs. That said, I have Pro (active scanning) version of both won in contests. If you want an active antimalware program, and do not want to pay for one (Malwarebytes Pro is $19.95 or less these days), then by all means use Windows Defender. I'd still suggest installing the free versions of both Malwarebytes and Superantispyware.

For an antivirus program, I personally use the free Avast. Many here use the free Microsoft Security Essentials and like it.

A Guy

 

[Britton30]

Windows Defender is disabled by Norton when I installed it but I can run it on-demand as I want. It was originally a Giant Software which MS bought. GIANT AntiSpyware - Wikipedia, the free encyclopedia
For on demand I much prefer MalwareBytes and Super Anti Spyware, they both have a larger definition base.

 

[Layback Bear]

Vendetta you have been having this problem for a very long time. I have been reading your post all over the net. Most of them point to a game or program of some kind doing this.

Can you install Ccleaner and give up a picture like this. It will probably take 2 of them.

http://www.piriform.com/ccleaner/download

 

[Vendetta]

Hi Layback Bear,

I've solved the problem with the nCore files, it's from the Stop Sign AV. My computer is back to normal now after uninstalling the software and re-installing it. If it gives me fits again, I will resort to using another virus software for protection.

 

[Layback Bear]

Well good your fixed.
I don't know anything about Stop Sign but Microsoft Security Essentials works for me and millions of others.
If you ever good looking for another anti virus I suggest putting it on your list.

 

[Britton30]

Well good your fixed.
I don't know anything about Stop Sign but Microsoft Security Essentials works for me and millions of others.
If you ever good looking for another anti virus I suggest putting it on your list.

Good suggestion, link is in my sig.

 

[Vendetta]

Thanks, will definitely check out the MS software! Glad someone finally figured out the nCore remedy. It was really annoying having to click on the shortcut to the folder and Shift Delete the NDB files every hour or so from it filling up the drive.