Cook - Serve - Delicious Message Board  

Already checked, but the the problem listed involving a TMP file isn't what is happening with the trainer, my windows is trying to open the TMP (but doesn't know how) instead of opening the trainer screen

The tmp file is a critical part of the trainer which is being blocked by something on your machine or you are not right clicking run as admin on trainer. Since it's being blocked or inaccessible, Windows tries to open an uncompiled and incomplete part of the trainer and it doesn't know what to do with it so it shows that message.

I tried both 'run as administrator' and 'disabling anti-virus' option without sucess. Other trainers I have here (older ones) works, only this one is causing trouble. Some especifics of newer trainers with Windows 10?

Edit: now the trainer decides to run, after I tried to put it in a different folder from the other trainers. Thanks for the help

[Edited by gandalfnho, 3/5/2017 7:04:55 AM]

This trainer is busted and needs to be patched up.

1. "Invalid Trainer User! This user has been banned." Pretty sure that shouldn't happen for a freshly configured download.

2. Desktop icon looks different than the standard CH icons

3. Jotti scanner results:

Name: csd-[configured for me].exe
Size: 614.07kB (628,804 bytes)
Type: PE32 executable (GUI) Intel 80386, for MS Windows
First seen: June 23, 2017 at 7:05:47 AM GMT+2
MD5: f18958be1c961645fb4aae428e78ba70
SHA1: ae47624db92d122792f60ab74ea9cd79e8d58ae0
Status: Scan finished. 11/18 scanners reported malware.
Scan taken on: June 23, 2017 at 7:05:50 AM GMT+2

Lavasoft Ad-Aware -- Found nothing
Avast! Antivirus -- Win32:Malware-gen
AVG -- Found nothing
BitDefender Antivirus -- Found nothing
ClamAV -- PUA.Win.Packer.Purebasic-2
Dr. Web -- Trojan.DownLoader10.63222
MicroWorld eScan -- Found nothing
ESET -- Win32/HackTool.CoSMOS.AL
Fortinet -- Riskware/CoSMOS F-PROT
Antivirus -- W32/GenTroj.BA3.gen!Eldorado
F-Secure -- Anti-Virus Found nothing
G DATA -- Win32.Riskware.Hacktool.J
Ikarus -- PUA.MSIL.Dotbundle
K7 AV -- Unwanted-Program ( 004eb0fe1 )
Kaspersky Anti-Virus -- HEUR:Trojan.Win32.Generic
Sophos -- Found nothing
Trend Micro Antivirus -- Found nothing
VBA32 -- Trojan.MSIL.Crypt

4. Windows 10 Defender has this file quarantined. I don't know how or want to disabled Defender.

Category: Trojan
Description: This program is dangerous and executes commands from an attacker.
Recommended action: Remove this software immediately.
Items: file:C:\Users\Ryan\AppData\Local\Temp\~Mnn133.tmp

Get more information about this item online.

Have you visited our Trainer Troubleshooting Guide and our AV Notification page?

The tmp file in question is well-known to set off a lot of AVs and is getting deleted or quaratined on sight. It's a false positive and needs to be excluded in any av scan.

Trainer Troubleshooting Guide -> Link

AV Notification -> Link

Yes, I have visited those.

"3. Jotti scanner results" specifically relates to AV Notification.

"Temporarily disable/uninstall all antivirus, firewall and other security software. This type of issue can be caused by interference of third party software, typically security software." I'm not running any of these third-party apps other than the native Windows 10 Defender app. I'm not sure how to disable this, nor do I want to. I've run plenty of CH trainers with no incident. This is the first that is legitimately not working. Could you at least look at it to determine that the file is kosher?

Thanks, and apologies for being a bother.

(a lifetime subscriber)

I already looked at the file, it is fine and all you need to do is the following:

Temporarily disable Windows Defender, run the trainer with admin rights, create a file exclusion rule for ~Mnn133.tmp in the known location, enable Defender back again.

If you don't know how to create exclusion rules for Defender please watch how it's done. -> Link

Thanks, Taurusplopp! That fixed the issue. I'll note that for future use. I would recommend adding that as a new FAQ. It is extremely helpful.

[Edited by tommy3467, 6/24/2017 5:56:27 PM]