This is in C:\temp, does anyone know what it is for?
Gosh I can't find any definitions for that Hazelnut. Someone on Spybot's forum had the same entry and they were told to delete it. Maybe you should upload it on jotti's website, and see what the scanners say.
Yeah upload it to Jotti online malware scan, and even possibly look at it in a hex viewer.
Jotti has found no problem with it. The log says it was modified on the 2nd of December last year. I shall keep looking for info about it.
Just a little update on this, I wonder what anyone thinks of these 2 possibilities.
1. eml files are used in Outlook Express.
2. EML log manager (formally known as the event log manager)
Try sending a resized picture in OE and see if you get another one. A guess, of course. Right up there with the zerox folder.