SAIE.EXE

Last Friday I was asked to look at a system. The system would hardly work. Click an icon and five minutes later it would activate. The desktop was covered with icons that wasn't suposed to be there. Everythig from "optimize your system" to "get free porn".

Client was using the latest Norton AV. Used task manager and msconfig to disable most of it to get Norton to run at a half way decent speed. Eight hour later and Norton hung up. Tried Norton again on Saturday and again it hung up. Tried again and it finished only to come in on Monday to find out the client closed Norton before I could get there.

Monday afternoon, a second computer infected with the same worm only this one was on MY network. Stupid blond biatch secretary decided to open an attachment in an email that said "Here's the postcard you requested!" I felt like punching her in the face. Three days of getting nowhere with the other one and here I am faced with the exact same thing on my network because of stupidity.

The worm un-installed McAfee on her computer. I disabled as much as I could in task manager and msconfig and re-installed McAfee. Rebooted and updated McAfee and slowly but surly found the culprit. HTML/DEBESKI was the bastage causing all this havok. McAfee found what the lastest version of Norton couldn't.

Ran McAfee and got rid of the main virus/worm/trojens. Had to run it 3 times before everything was clean. However, the worm installed a BOAT load of adware and spyware. Had to run Ad-Aware 6 times and Spybot Search and Destroy 3 times to completly remove everything. Repeated on the first computer infected and fixed it also.

SAIE.exe was there the whole time on both machines. If I find out it's adware, I'm gonna make it my misson to make sure the people responsible pay for it.