Friday, February 11, 2011

Story of an Infected Computer: Part 3

and the saga continues...

Today the machine was infected with Spyware Protection (defender.exe)
It pretends to be an antispyware program, warning of threats and infections
It was very annoying (closing applications, preventing task manager from staying open, etc)
But thankfully easy to remove (renamed exe, reboot, and remove)
SuperAntiSpyware did detect and remove the registry key for it
I might try Microsoft Security Essentials if I ever clean and reinstall Windows

1 comment:

  1. We got hit by the same thing on a number of machines where I work too. At least it's an easy fix. We tend to system restore then delete the exe in safemode and do a SAS or MBAM scan afterwords.

    ReplyDelete