Richard wrote:
> The following two files are always identified as spyware every time I run
> SUPERantispyware (free edition), which is several times a week. The
> program then quarantines them and them removes them. Are these serious
> enough to warrant further action and why do they keep coming back?
>
> Rogue.PC-Cleaner
>
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad#wdpoefan[
> {DE8062CC-89CB-463E-AF01-DA85DA065FC5} ]
>
HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad#vadokmxt
> [ {6F25D4C7-E549-4E97-9B0C-5A3143E59960} ]Thanks very much for whatever
> advise you can provide.G
You've got some sort of trojan. It is common for malware to respawn.
Obviously, your SuperAntispyware program isn't cleaning it. In all good
conscience, I can't recommend leaving a computer in an infected state.
You can run through my general malware removal steps but with the current
crop of malware there is a high probability that you'll need to get guided
help. I also should tell you that in many cases, you'll need to do a wipe
and clean-install of Windows to really get clean. So back up any important
data now.
http://www.elephantboycomputers.com/page2.html#Removing_Malware
When all else fails, get guided help. Choose one of the specialty forums
listed at the link above. Register and read its posting FAQ. You will
generally be asked to:
1. Download and execute HiJack This! (HJT) -
http://www.trendsecure.com/portal/en-US/threat_analytics/HJTInstall.exe
2. Disable Notepad's word wrap - In Notepad.exe Format --> uncheck "Word
wrap"
3. Download/run Deckard's System Scanner -
http://www.techsupportforum.com/sectools/Deckard/dss.exe
4. Save the scan results (Main.txt and Extra.txt)
5. And then post the contents of Main.txt and Extra.txt in your post at the
forum you chose. DO NOT POST LOGS IN THE MS NEWSGROUPS.
Standard disclaimer: I can't see and test your computer myself, so these are
just suggestions based on many years of being a professional computer tech
suggestions based on what you've written. You should not take my
suggestions as a definitive diagnosis. If you can't do the work yourself
(and there is no shame in admitting this isn't your cup of tea), take the
machine to a professional computer repair shop (not your local equivalent
of BigComputerStore/GeekSquad). Please be aware that not all local shops
are skilled at removing malware and even if they are, your computer may be
so infested that Windows will need to be clean-installed. If possible, have
all your data backed up before you take the machine into a shop.
Malke
--
MS-MVP
Elephant Boy Computers
www.elephantboycomputers.com
Don't Panic!