lich.exe

[Frank2006]

Hi -

My laptop has recently been infected with something called "lich.exe", bearing an icon which looks like Dracula ! Upon starting my computer, the firewall (free latest version of ZoneAlarm) constantly asks for permission for this programme to access both the trusted zone and the internet, which I have denied. A full scale scan using up to date Norton Antivirus fails to spot the programme. I have run a standard search for the programme (which seems to call itself a "loader") and it was found in windows system 32. I have tried to remove it and it will not budge. A Google search on "lich.exe" revealed several other users of similar fora who have been infected since mid-February, with no solutions offered.

Can anyone help me get rid of this and does anyone know what it is ? I have no idea how I came by it.

Thanks in advance for your help.

[md usa spybot fan]

Consider posting in the Malware Removal forum. Possibly one of the helpers there can be of assistance.

Follow the instructions here:
BEFORE you post a log, and who will advise you.
http://forums.spybot.info/showthread.php?t=288
Then post in the following forum:
Malware Removal
http://forums.spybot.info/forumdisplay.php?f=22
Also you should also consider contacting Symantec. Since it appears to be a relatively new Trojan (or whatever), they may be interested in a copy of the file to study.

[tashi]

Dupe posted here:
http://forums.spybot.info/showthread.php?t=2616
Member has posted in the Malware forum:
http://forums.spybot.info/showthread.php?t=2633