How to Remove Spyware with Randomly Generated Process and File names?

Dennis Faas's picture

Infopackets Reader Joe B. writes:

" Dear Dennis,

I've been desperately trying to clean my computer of a nasty Malware / Spyware infection for the last 5 days. A characteristic of something that is going on is that while I'm typing along in a window, the window is suddenly de-activated and I have to mouse back to the window to activate it and continue typing. It's most irritating!

I believe I have resolved the majority of the Spyware infection, however there are 4 files that keep reappearing even after I delete them. I can't seem to find instructions on the web, either. I'm not sure what to do now and would appreciate any help you can offer. "

My response:

Spyware is getting trickier and trickier to remove.

In the early days of Spyware removal, all that you needed to do was to identify the program (or .DLL file) associated with the Spyware and type in its name into a search engine (such as Google) in hopes of finding a page with removal instructions.

However, some of the newer generations of Spyware are replicating themselves into randomly generated filenames at boot up, so that it is next to impossible to research the filename or process name in hopes of finding removal instructions. I suspect that this may be the case with your infection because the files are magically reappearing.

I assume that you have attempted various Spyware removers in hope of removing this infection, but none have prevailed. Notably so. Logically, the next step would be to search for manual removal instructions.

Since it is not always feasible to search the web for manual removal instructions by filename or by process name, I suggest that you use a Spyware scanner / remover to help you to identify the Spyware variant name (for example: i.worm32.random.c). To identify the variant, use a credible Spyware removal utility -- and most importantly, ensure it is up to date with its Spyware definitions so that it has a fighting chance in recognizing the worm. Older definitions won't recognize the worm (obviously) if it was created after the definition was released. (Hint: Spyware definitions work like heuristics in order to identify different types of Spyware).

I also suggest you download Spyware Doctor to do the scanning. Spyware Doctor has recently won PC Magazine's Editor's Pick and is touted a 5/5 by (two reputable sources). If Spyware Doctor is unable to successfully remove the Spyware, note the Spyware variant name and then go to and type in "remove <variant name>" in hopes of finding step-by-step manual removal instructions.

Good luck!

Rate this article: 
No votes yet