Help Please Cannot Remove Process.exe

[fdimike]

I am using windows xp with all the latest updates posted. I am also using Avast anti viruse. Avast has alerted me to a suspicious file titled: c:\windows\system32\process.exe, type: rootkit:hidden process . Unfortunately Avast is unable to remove the file. The virus/malware/wahtever it is hijacks the programs I attempt to open by opening a window titled Windows Installer. I cannot proceed with opening the program until this Windows Installer drops off the screen. I have tried all of the following with negative results: Avast, Adaware, Smit Fraud, Super anti spyware, McAfee Rootkit Detective, Trend, Malware Bytes.

I really need some help in eliminating this infection as soon as possible.

Thanks to all

[GT500]

To get rid of Process.exe, open Malwarebytes' Anti-Malware, click the "More Tools" tab, click the "Run Tool" button for FileASSASIN. This tool should schedule a delete on the next reboot.

I also recommend that you read these instructions, and then post your logs in the Malware Removal - HijackThis Logs forum. One of our experts will be able to help you get cleaned up.

[YoKenny1]

There is plenty of chatter about process.exe on the avast! forum:

http://forum.avast.com/index.php?topic=40899.0

[GT500]

http://www.threatexpert.com/files/process.exe.html

http://www.bleepingcomputer.com/startups/p...s.exe-7200.html

I say delete it. If it's part of a legitimate application or driver, then you can reinstall it.

BTW: Can you start Windows up in Safe Mode and save a copy of process.exe to your desktop? It would be nice if this undetected threat could be uploaded to Malwarebytes UploadNET for analysis.

[sho-dan]

fdimike should follow GT500 post #2 suggestion.

This process.exe may part of SmitFraudFix, as fdimike has stated in using this program.

http://siri.geekstogo.com/SmitfraudFix.php

Note:

process.exe is detected by some antivirus programs (AntiVir, Dr.Web, Kaspersky) as a "RiskTool". It is not a virus, but a program used to stop system processes. Antivirus programs cannot distinguish between "good" and "malicious" use of such programs, therefore they may alert the user.

http://www.beyondlogic.org/consulting/proc...processutil.htm