I have a laptop with Windows 8.1 that got infected by rootkits.
Here is what I have already done:
Ran Malwarebytes Full Scan - (see notes below this list)
Ran SuperAntiSpyware Full Scan - multiple times until it found nothing
Ran Avast! Full Scan and Boot Scan - multiple times until they found nothing
Ran TDSSKiller - it found nothing
Ran AdwCleaner - 2 times, second time it found nothing
Ran Junkware Removal Tool (JRT) - 2 times, second time it found nothing
Ran MacAfee Rootkit Removal Tool - it found nothing
At this point, Malwarebytes keeps finding new files, folders, and registry entries during the Heuristic portion of the scan. No matter how many times I run it, it finds them, cleans them, and then they return.
I am suspicious of 2 things in particular
1) In C:/Windows/ProgramData there is an UpdateTask folder with a file called vmhost.exe that I cannot delete. Every time I check, the file has been modified within the last hour or so.
2) In C:/Windows/ProgramData there is a MediaDev folder with a sub-folder in it called 1403631292 with a file in it called mediadev.exe that I cannot delete.
Would anyone be able to help me?