Your step-by-step help was awesome, and I had completely believed that the problem was fixed. I had no problems getting your RSKiller to run, it listed over 8 things it had removed (the biggest of which being adobe and java). I ran a FULL scan with Malwarebytes (which I am already completely familiar with because its my MAIN virus scanner ^^), and it finished a scan with 2 infected files. It said it successfully removed them, I accepted it wanted to restart...
And it was back.
I told myself "Okay, okay. They said it might not work. I'll run a DIFFERENT RSKiller file."
So I started all over again. And yet again, I thought it was all successful. I even downloaded the unhide.exe, and got the joy of seeing everything returned back to normal. Malwarebytes finished up with NO detected files. I, however, wanted to be COMPLETELY sure it was gone, because doing this takes over 2 hours. I downloaded the PSIsetup to check for vulnerable programs, and continued deleted and tweaking until my final scan was at a 100%. I ran RSKill ONE last time, and it came back with nothing
I really thought I was in the clear...but as soon as I reset again, it was back.
I think I need help now =P I cannot stand doing another 2-3 hour long process just to have it not work. There has to be something i'm missing
Somehow, this virus is hiding from your programs and Malwarebytes. What can I do to make sure it is COMPLETELY snuffed out?
There was definitely progress, at least. I am online right now, on the infected computer. It didn't hide my internet connection from me like it did before. It is
hiding basically ALL of my documents again, but the internet (Firefox) and Malwarebytes are both here. Hopefully that means there was some progress??
Help me vanquish this virus from hell.
The typical information you may need:
- My system is Windows 7
- The malware is Windows 7 Recovery
- It is hiding documents, making false reports about a failing harddrive, and shutting down my computer. I always do my best to STOP the shutdown, but it succeeded once before I actually started the correctional process the SECOND time.
- It is currently unactive, as I ran RSkill. I have done nothing else, however, as I want to make sure to follow you guys completely step by step. I know it's still there, I just wanted to get it to stop the alerts.