What are these? I recently just got attacked by ransomware and I removed most of the malware that got onto my pc, this is the only thing left that I don't know whether if it is windows creating them or the virus, these 2 .tmp files change its name every startup like G176AB.tmp or NBY143.tmp (somthing like that) and "_PSScriptPolicyText_1nciemo.20k.ps1" and
"_PSScriptPolicyText_302rmtyw.ko0.ps1" also appears on the temp folder and will just disappear too.
I recorded a video of these files changing on their own. https://drive.google.com/file/d/158qEq_9DwAa15mBJob-i3r9j5bNp4JcT/view?usp=drivesdk
Any help would be appreciated. Thanks!
sorry for bad english
"_PSScriptPolicyText_302rmtyw.ko0.ps1" also appears on the temp folder and will just disappear too.
I recorded a video of these files changing on their own. https://drive.google.com/file/d/158qEq_9DwAa15mBJob-i3r9j5bNp4JcT/view?usp=drivesdk
Any help would be appreciated. Thanks!
sorry for bad english