Does anyone have any clue what the hell this thing is? It’s been bugging me to death for the past 15 minutes…ehehe…15 minutes…
Anyways, I’ve deleted a few of the .exes labeled canada.exe along with their shortcuts, but I’m 100% certain that there is a .dll file along with it that keeps bringing it back.
To know more, maybe Google…
If you find a virus keeps coming back after you delete it, it’s most probably infected the System Restore folder, the best way to solve this is to disable System Restore, reboot your machine and then enable it again. After all, run a full avast! scanning. System Restore cannot be disabled on Windows 9x.
There’s really no need to reformat just because of a bit of poxy spyware on your system.
First of all, have you done a scan with Ad-Aware, Spybot and MS Anti-Spyware, preferably in safe mode?
Next, the file is coming back because you haven’t killed the processes which are recreating it. A Google search will reveal several anti-spyware forum threads which identify processes which are associated with this malware. If the ones Eddy mentioned are not responsible, you need to do a search for canada.exe and make a note of the processes and files which are associated with it. Kill the processes and delete the files, or start your computer in safe mode where the processes will not be running and delete the files.
If this doesn’t work, please post a HijackThis! log as described here: