Boot to safe mode: Instructions here
browse to the C:\documents and settings\User Name (repeat for all users)\local settings\temp folder and delete all files and folders in it.
Then browse to the C:\Windows\Temp folder and delete all files in it.
Then in internet explorer click tools>internet Options>General. Click on Delete Files make sure you get all offline content as well.
Then empty the recycle bin.
Recently I ran task manager on my office pc and found a process named AKED5F.EXE in the list. I tried to end the process but got denied error, even if I logged in as Administrator. When I search for the file I found it in \WINNT\Temp folder and have an icon of a yellow dog. There is nothing in the properties to point out the source of the file.
I decided to restart the computer in safe mode and delete the file (the file does not load in safe mode). When I restarted the computer in normal mode, another file was created with the same size and icon but different name. It keeps changing names when I do something to it. The same file (with different names) also appeared on other pc in the office. The name seems to be random. Strange?
Info: All pc are networked together via a very large scale Networking (Router, Gateway, Firewall, everything and 1500+ PCs)
Antivirus: Multiple, but only ones with Office Scan is affected, but not all.
OS: Multiple version of windows but only Windows XP and 2000 are affected.
Test PC:
Windows 2000 SP4
Office Scan Antivirus
Consider everything is patched up-to-date.
I have tried running Ad-Aware, A-Squared and Norton Antivirus: - nothing.
I have also run Zone Alarm to see if it tries to connect to the Internet, but so far nothing. But I read somewhere that if a program runs and connects to the Internet before Zone Alarm is started, Zone Alarm will not detect it.
Maybe I am paranoid and this will turned up to be nothing, but want to be sure. Any ideas?