BleepingComputer.com: Windows 7 Antispyware 2012

Hello. About 2 hours ago, I was infected with the Windows 7 Antispyware 2012 virus. Now, I have been infected before by a similar virus, so I was quick to react to the situation. I google'd a quick removal guide and found one on this website. I downloaded the required files, which were FixNCR.reg and RKill.exe and continued the removal process. After RKill.exe ended its search for any malicious software that were currently running(not really sure how to explain this), the guide informed me to install MalwareBytes, which I already had installed before, and run a full scan. I did. Nothing was found. I was very perplexed by this. The guide informed me that MalwareBytes should have certainly found the virus and removed it from my system. I ran a quick scan as well as a full scan. Still nothing. So, I decided to download and install SuperAntispyware Free edition. However, it also found nothing besides some cookies. Like I had said before, I had been infected by a similar virus in the past and used Malwarebytes to successfully remove the virus. My question is, is the virus gone? Is it still wandering in the vast memories of my system? If so, please assist me in the removal of this horrendous virus. It is currently bedtime for me, as it is quite late, so please forgive me if I do not reply until tomorrow morning. Once again, thank you for your time and effort.

This post has been edited by Orange Blossom: 12 December 2011 - 08:55 PM
Reason for edit: Moved to AII. ~ OB

Malwarebytes did not detect vista rogue(which hides in appdata/local,it finds the other copies) till yesterday but today i could see it removing rogue which is located in APPDATA/local folder.It is to be noted that it finds the rogue only when mbam runs in safemode


Run a scan in safemode first


Go here

C:/users/Appdata/local

check for xyz.eze file

Delete it if you find one,you may need to run EXE fix after deleting the rogue

Hi. I will run MBAM in safe mode now and see if it finds anything. Thank you for the advice.

About 2 hours ago, I was also infected with the Windows 7 Antispyware 2012 virus. I downloaded the file FixNCR.reg to a zip drive and installed on infected pc which indicated it installed successfully. The instructions indicate I should now be able to access normal executable programs to proceed to next step of downloading RKill, but when I try to open Internet Explorer, I get same virus pop ups and IE is blocked. Am I missing a step? Do I need to do something after installing FixNCR.reg and before downloading the RKill link from bleepingcomputer.com?