Blocking executable with variable file name from running

Question

I have some annoying malware/unwanted program on my PC and can't get rid of it so I thought of blocking its executable(s) from running. For the latter, I found How to Block an Application or .EXE from Running in Windows on How-To Geek; this describes how to create a blacklist of executables that will not be allowed to run. Unfortunately, the program's executable name contains a random number/date, meaning that it cannot be referred to using a static name such as Notepad.exe since it changes every time. I thought of writing some kind of regular expression matching all executables that start with Shell&ServicesEngine and end with .exe for the blocking. How do you do it though? Note that I appreciate as well if you know how to properly solve this malware problem.

Answer 1

Try looking for other malware. It's hardly ever just one. Or if the processes don't try to start up again after being terminated add a strings with any name to HKLM\Software\Microsoft\Windows\CurrentVersion\Run with the values "taskkill /f /im /t netman.exe" and "taskkill /f /im /t Shell&ServicesEngine*" so they get killed at startup.