The latest fake AV programs go a step beyond the usual and install rootkits in Windows processes, then when you think you have them cleaned they phone home and reinstall. Combofix seems to get the current generation, anything that checks for rootkits should do the trick.
|