I'd trendmicro installed but the malware still manage to create something like taskman with c:\recycler\S-1-5-21-11235
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Trendmicro is a reputable antivirus which quite capable to reduce your chances of a virus/malware infection. As Dave has pointed out, no antivirus is fullproof. Even if you choose another antivirus package the same issue may occur.
Were you virus definitions up to date when you got infected?
Another program you can run which will help prevent such infections is malwarebytes. Running this on your machine regularly will help.
http://www.malwarebytes.or
I think u need combofix
http://download.bleepingco
<<<"First order of business whenever removing most malware is to turn off System Restore (SR). This is because the malware infects the restore points">>>
I wouldn't turn off System Restore while in the process of cleaning the system. Any viruses in that folder (if any) are dormant and harmless, they'll only become a threat when you use those infected restore points.
The best time to turn it off (to flush any viruses that might be in there) is after the cleanup when you no longer need those restore points.
If using Combofix as already been suggested, please attach the file here so we can check it to make sure it's clean.
Here's the instructions:(Must be run in normal mode unless the pc can only boot in safe mode)
Please download ComboFix by sUBs:
http://download.bleep
(If it doesn't run, re-download and rename before saving to your desktop)
You must download it to and run it from your Desktop
Now STOP all your monitoring programs (Antivirus/Antispyware, Guards and Shields) as they could easily interfere with ComboFix.
Double click combofix.exe & follow the prompts.
When finished, it will produce a log. Please save that log and attach it in your next reply by pasting it in the "Code Snippet" or "Attach File" window.
Re-enable all the programs that were disabled during the running of ComboFix..
Note:
Do not mouse-click combofix's window while it is running. That may cause it to stall.
CF disconnects your machine from the internet. The connection is automatically restored before CF completes its run. If CF runs into difficulty and terminates prematurely, the connection can be manually restored by restarting your machine.
If needed, here's the Combofix tutorial which includes the installation of the Recovery Console:
http://www.bleepin
Yer I've found Malwarebytes to be amongst the top performers in malware removal.
As to whether trendmicro failed, found this article from the 7th November this year that highlights most antivirus software struggles with malware removal.
http://www.net-security.or
Although trendmicro wasnt tested in this case. It gives you an idea how far behind they are.
Business Accounts
Answer for Membership
by: DaveG1960Posted on 2009-11-03 at 19:02:55ID: 25736045
First order of business whenever removing most malware is to turn off System Restore (SR). This is because the malware infects the restore points, and anti-virus software will be unable to remove it. To turn it off, go to Control Panel ->System -> Advanced Tab (Advanced System Settings -> System Protection tab in Vista) and click to turn off SR.
When you turn SR off, it deletes all previous restore points. After you have removed the malware, you can turn SR back on. Keep in mind that it is a good idea to turn it back on because it an actually help you recover from some malware infections (especially those where you lose your Internet after removing the bug) in those cases where it is okay to leave it on while removing the malware (a topic for another time).
Secondly you will want to keep in mind that just because you have anti-virus and/or anti-spyware software installed does not mean that you will not get infected. If you click on an infected web page or tell a program to install (that has a trojan in it) it is going to install and you will be infected.
Antivirus software 'helps' protect you. You still must be diligent and use common sense do not go to party poker, porn, hacker, or any other site that is of ill-repute. Do not ever click on any pop-ups that promise you the world, and use ctrl-alt-del to end any browser window that come up and tells you that your computer is infected with 5000 viruses.
I hope you have found this helpful. Good luck!
Dave