Firetree
2011-06-16, 04:22
There has been a rash of folks coming to me with infections with a rogue program called (variously) Vista, or XP, Antivirus (or Internet Security) 2012. It appears that all the variant names are the same bug. The big problem is that it also appears that SpyBot is not detecting this bug, as all of these folks have been using SpyBot properly (updating and reimmunizing). At the moment I'm attempting to scan one of their drives as a slave using the Windows Explorer SpyBot plugin to see if that will find the bad files, but of course I don't think that will take care of registry keys. Anyone worked with this and have a method to clean this bug that works?