faxad.exe and vssmc.exe?

These files put themselves into C:\windows\servicepackfiles\ and they seem to slow down browsing.

When i try to end these processes they start up automatically again. So I have to try to end the process and delete the file as fast as i can. Takes a couple tries but I get it. I deleted the faxad first, only to have it replace itself...then I did it again and the vssmc file was there.

Hijack looks like so:

O4 - HKLM\..\Run: [*faxad] C:\WINDOWS\ServicePackFiles\faxad.exe
O4 - HKLM\..\Run: [*vssmc] C:\WINDOWS\ServicePackFiles\vssmc.exe

Anyone have any input or help?
Thanks.

 

Hi Mark,

Please take a look at the threads in this link for more info on this type of problem: READ ME: Virtumundo Problems/Resolution Threads They will acquaint you with the removal process.

If you still need some help, then we would ask that you please take a run through this Cleanup Tutorial. It will remove a lot of crap that would otherwise clog up a HijackThis Log:

READ ME FIRST BEFORE ASKING FOR SUPPORT: Basic Spyware, Trojan and Virus Removal

Note the steps that you can and cannot complete. Please make sure that you are in Safe Mode with System Restore OFF and have the Viewing of Hidden Files ENABLED as per the instructions in the link. Make sure to do the Online Scans.

Post back with the results from the above instructions and we’ll go from there. Please send us a HijackThis Log with your post.

Note that your HijackThis should be up-to-date (v1.98.2) and MUST be extracted to its own safe folder - C:\Program Files\HijackThis!

If you need a Fresh Download of HJT, get it HERE: HijackThis 1.98.2

Also note that, before you scan, you MUST close all running programs including your web browser, e-mail and items in the system tray.

Please save your HJT Log as a .txt file and attach it via the "Manage Attachments" tool in the Additional Options section when you post.

Send us a log and we'll go from there - I'll try to check back when I get a chance, but I am a bit overextended these days. Hang in there.

Best luck
PP