Submitted files [Locked]

G’day,

I submitted a couple of files last night (q.inx and start.exe). I believe that these are part of the download bundle associated with Spyware.Falcon (first detected May 8, 06). They may also be related to the latest iteration of “smitfraud”, namely smitfraud.g. The other components that appeared are atmclk.exe and dcomcfg.exe. Both of these processes are proving exceptionally hard to eliminate, as they self monitor and self replicate each other.

Have tried / am currently trying the following

adaware
spybot
arovax
killbox
hijackthis
process defender
CAV
AVG
smitrem.exe
smitrem.reg
prevx1
spydoctor
bho kill
ads kill

Any other suggestions would be greatly appreciated.

As and when I get more info, I’ll repost here.

wish me luck,
ewen :frowning:

autoruns? by Sysinternals

Do the files show up in Process Explorer? Select the files and suspend them before killing them. That is how I saw Marc Russinovich clean up in a video about malware.

Have you tried Malwarebytes and Super Anti Spyware?

Mmm boys :o

Please look at the posting date : May 09, 2006

This topic is almost 3 years old 88) I think Ewen will have sorted it out by now ;D

Greetz, Red.

Topic Locked
Reason: Out of Date