Microsoft Update Machine

[delta1071]

My computer is infected with a program that runs on startup and restarts itself whenever it is disabled. It manifests itself as a file that has a six-letter nonsense name, such as fjyukp.exe. SS@D, Adaware Free and Spywareblaster have not been able to detect or prevent it. Removing the entry from the registry (using Autoruns by Sysinternals) in safe mode does nothing; it's back on the next reboot. It seems there are more than 1 instance of the file in the \System32 folder. BTW, my OS is Vista Ultimate 32-bit.

[delta1071]

Also, using Microsoft's Process Explorer, I was able to determine that this process is contacting a web site in Slovenia on a regular basis. I have no idea what information it is transmitting.

[tashi]

Hello.

Please see the stickied procedure for this forum: "BEFORE you POST"(READ this Procedure BEFORE Requesting Assistance) (http://forums.spybot.info/showthread.php?t=288)

Then start a new topic, I will close this one as helpers look for zero response. ;)

Cheers.