LamarRoot

Agreed. Thanks.

It sure looked legit. Very strange. Also it appears the bad guys have engineered around the Chameleon solution, as the update/install sequence (in the cammand line box) fails. I tried the real Panda tool to see if it would purge zaccess, and it said it was successful, but my Trend Micro scan keeps picking them up. I'm going to have my IT guys simply wipe the drive clean and rebuild it. I've wasted an afternoon trying to clean it on my own. BTW - I have labs too. Used to do field trials.

I appreciate the response, but how did the file get there in the first place?

I followed instructions in http://forums.malwarebytes.org/index.php?showtopic=107641 to remove Security Shield malware, but Trend Micro Core Protection Module keeps detecting various trojans. Also, after completing the scan, an icon for yorkyt.exe appeared on my desktop. Given the tenacity of the Security Shield malware, I assume this new file is part of the scam?