How to Remove Spyware with Randomly Generated Process and File names?
- by Dennis Faas on 20050822 @ 10:42PM EST | google it | send to friends
- Filed under Security | (related terms: remove, identify, window, spyware infection, spyware removal)
Gazette Reader Joe B. writes:
" Dear Dennis,
I've been desperately trying to clean my computer of a nasty Malware / Spyware infection for the last 5 days. A characteristic of something that is going on is that while I'm typing along in a window, the window is suddenly de-activated and I have to mouse back to the window to activate it and continue typing. It's most irritating!
I believe I have resolved the majority of the Spyware infection, however there are 4 files that keep reappearing even after I delete them. I can't seem to find instructions on the web, either. I'm not sure what to do now and would appreciate any help you can offer. "
My response:
Spyware is getting trickier and trickier to remove.
In the early days of Spyware removal, all that you needed to do was to identify the program (or .DLL file) associated with the Spyware and type in its name into a search engine (such as Google) in hopes of finding a page with removal instructions.
However, some of the newer generations of Spyware are replicating themselves into randomly generated filenames at boot up, so that it is next to impossible to research the filename or process name in hopes of finding removal instructions. I suspect that this may be the case with your infection because the files are magically reappearing.
I assume that you have attempted various Spyware removers in hope of removing this infection, but none have prevailed. Notably so. Logically, the next step would be to search for manual removal instructions.
Since it is not always feasible to search the web for manual removal instructions by filename or by process name, I suggest that you use a Spyware scanner / remover to help you to identify the Spyware variant name (for example: i.worm32.random.c). To identify the variant, use a credible Spyware removal utility -- and most importantly, ensure it is up to date with its Spyware definitions so that it has a fighting chance in recognizing the worm. Older definitions won't recognize the worm (obviously) if it was created after the definition was released. (Hint: Spyware definitions work like heuristics in order to identify different types of Spyware).
I also suggest you download Spyware Doctor to do the scanning. Spyware Doctor has recently won PC Magazine's Editor's Pick and is touted a 5/5 by Cnet.com (two reputable sources). If Spyware Doctor is unable to successfully remove the Spyware, note the Spyware variant name and then go to Google.com and type in "remove <variant name>" in hopes of finding step-by-step manual removal instructions.
Good luck!
Free guide: Windows 7 -- Free Quick Reference Card. Ask any pro computer user and they'll tell you: having to constantly reach for the mouse not only causes strain on your neck and back - it also slows you down. Imagine being able to control your computer the way it was meant to be - using your keyboard! With this guide, you'll learn to dramatically increase productivity using the best ways to navigate, organize, and manage your Windows PC and its contents. Most importantly: the majority of these shortcuts, tips, and tricks are valid for any PC, netbook, and laptop running Windows XP, Vista, and 7. Use it to brush up on the basics and to find alternate methods to your favorite commands. This printable quick reference guide is yours to use, distribute, and share! Click here to download this guide now! Note: this guide is free, but registration is required; after that, you can select more ebooks and videos for download without registering again. If you have questions / problems with the registration form, please read this.


