This may be nothing but I recently got hit by one of those fake Security software scams... no idea what happened but it was the worst hit I ever had. With anti malware, avira, sas, rogue killer, maybe something else, and a bunch of safe modes I finally cleaned it out. One thing seems to still be here or perhaps it was installed by one of the spyware cleaners i used like Rogue Killer. In c-documents and setting/my name/local settings/temp there is now a persistent .exe file that cannot be eliminated nor is it found by any virus/spyware checker as bad. Right now it's called WwYNcbL.exe and shows up in system configuration startup also. If I delete it it instantly reappears as a new named .exe file and in system config. Looking at properties it's description is "de'mettaient re'tractant rationalise'" its internal name is "cimenter" its version is 220.127.116.11, and it's copyright is "pre'serv bacterio 1999". Looks french so i thought maybe it's Rogue Killer's way of preserving itself but I thought I'd ask here where the experts know these things. Thanks.
Edited by rsimcox, 02 September 2012 - 01:24 AM.