Skip to content
Silicon Shecky

Silicon Shecky

Infosec Practitioner

  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Malware everywhere with some new tricks

Posted on October 19, 2010 By Michael Kavka 1 Comment on Malware everywhere with some new tricks

So as the malware war continues, I have found that the fake AV virus learned a new trick or two. The latest version I dealt with had a new rootkit in it that prevented combofix, malwarebytes and superantispyware from running. Of course it is not smart enough to stop those pieces of software from running if you change the name of their executables.

I suggest using combofix from bleepingcomputers.com first. Download it, rename the executable to comboxif.exe, and do not have it update. The autoupdate will have problems because of the infection. Just download the latest one available and run it.

Once combofix has run, all the other anti-malware programs should run without any issues or needing to rename them.

Computers, Security, Software Tags:combofix, fake AV, Malware, Malwarebytes, Rootkit

Post navigation

Previous Post: Shecky Tweets for 2010-10-19
Next Post: Shecky Tweets for 2010-10-20

Related Posts

  • Security is Reactionary, No Matter What Security
  • Defender, KQL and Lockbit Microsoft
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General
  • Are you sure it is the execs? Ramblings

More Related Articles

Security is Reactionary, No Matter What Security
Defender, KQL and Lockbit Microsoft
Defense Layers: A Case Study Microsoft
Device vs. User Microsoft
Ransomware, Are You Ready? General
Are you sure it is the execs? Ramblings

Comment (1) on “Malware everywhere with some new tricks”

  1. Cinderella Danekas says:
    October 25, 2010 at 22:46

    I tried at least a half-dozen applications to get a executable virus off my PC. One even required me to restore my computer. All the spyware/malware/virus programs found a quarantined the problem, but never removed it. This application found AND FIXED the problem.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP
  • About
  • Links
    • Burbsec
    • BSides312
    • Infosec Exchange Mastodon
    • BSidesRoc
    • Hacks4Pancakes Blog
    • Krebs On Security
    • Bleeping Computer
  • Categories
    • General
    • Computers
    • Software
    • Rants
    • Security
    • Internet/Music
    • Reviews
    • Microsoft
    • Hardware
    • Mobile Computing
  • Archives
  • Social Media

Connect

  • Bluesky
  • LinkedIn
  • Mastodon
  • RSS
  • Twitter

RSS feed: iFin Intel Feed iFin Intel Feed

  • CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles October 25, 2026 aws@amazon.com
  • Will AI expose the rickety infrastructure of the internet? October 24, 2026 Anthony Ha
  • PHP-ocalypse: How two critical web bugs almost broke the internet October 24, 2026 Zack Whittaker
  • BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot October 24, 2026 Bill Toulas
  • Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds October 24, 2026
  • CVE-2026-111497 Brotli Bug Reaches Far Beyond Node.js October 24, 2026 c0a15726-c5b1-4b0d-85e6-fe15553df9e2
  • OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found October 24, 2026
  • Vulnerabilities in PHP Affecting Cisco Products: October 2026 October 23, 2026
  • Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities October 23, 2026
  • Reported cyberattack disrupts Arizona Empowerment Scholarship Account vendors October 23, 2026 DysruptionHub Staff
  • Quest Diagnostics pauses lab portal after breach October 23, 2026 DysruptionHub Staff
  • New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack October 23, 2026 Karlo Zanki

Browse by tags

2008 Active Directory Android Antivirus Apple Beta CarbonBlack Chrome Computers Exchange Exchange 2007 Firefox General Thoughts Google InfoSec Internet Explorer iOS iPad IT Linux Mac Malware Microsoft OS OSx Patches SBS SBS 2008 Security Server SMB Software Support Surface TechEd Thotcon Tweets Ubuntu Verizon Virus Vista Windows Windows 7 Windows 8 XP

RSS feed: iFin Intel Feed iFin Intel Feed

  • CVE-2026-111943: eMudhra intermediate CA key recovery in AWS trust bundles October 25, 2026 aws@amazon.com
  • Will AI expose the rickety infrastructure of the internet? October 24, 2026 Anthony Ha
  • PHP-ocalypse: How two critical web bugs almost broke the internet October 24, 2026 Zack Whittaker
  • BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure Boot October 24, 2026 Bill Toulas
  • Autonomous attack agent in 'Skynet mode' hijacks other models to carry out its evil deeds October 24, 2026
  • CVE-2026-111497 Brotli Bug Reaches Far Beyond Node.js October 24, 2026 c0a15726-c5b1-4b0d-85e6-fe15553df9e2
  • OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found October 24, 2026
  • Vulnerabilities in PHP Affecting Cisco Products: October 2026 October 23, 2026
  • Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities October 23, 2026
  • Reported cyberattack disrupts Arizona Empowerment Scholarship Account vendors October 23, 2026 DysruptionHub Staff
  • Quest Diagnostics pauses lab portal after breach October 23, 2026 DysruptionHub Staff
  • New Evidence Shows LiteLLM Secret-Stealing Workflows Ran 11 Days Before Supply Chain Attack October 23, 2026 Karlo Zanki
  • Security is Reactionary, No Matter What Security
  • New Year, New Post, from the start General
  • First Defcon – The results Reviews
  • Defender, KQL and Lockbit Microsoft
  • Do well, not be “popular” Ramblings
  • Defense Layers: A Case Study Microsoft
  • Device vs. User Microsoft
  • Ransomware, Are You Ready? General

Social Media

  • Bluesky
  • Mastodon
  • Twitter

Copyright © 2026 Silicon Shecky.