Please download and run RKill
RKill is an easy to use tool that kills known processes and removes Windows Registry entries that stop a user from using their normal security applications. We will run the RKill before running the scans listed below.
These settings will remain until the computer is rebooted, for this reason you must run your security applications before the computer is rebooted.
Please download RKill
from the Bleeping Computer option and install it.
Attention: While running RKill you may see a message stating that the program could not be run because it is a virus or is infected. This is the malware trying to protect itself. Two methods that you can try to get past this and allow RKill to run are:
1) Rename Rkill so that it has a .com extension.
2) Download a version that is already renamed as files that are commonly white-listed by malware. The main Rkill download page
contains individual links to renamed versions.
When RKill is run it will display a console screen similar to the one below:
When RKill has finished running a log will be displayed showing all of the processes that were terminated by RKill.
Attention: At this time you need to run your security applications listed below. Do not restart the computer until all of the requested scans have been run and the logs posted in your topic.
After the application has run successfully you should reboot the computer to restore the processes and Windows Registry entries.
Please run Malwareybytes and the other tools I requested. Once you have downloaded and install RKill do not restart the computer until all of the scans have completed.
If you can not run Malwareybytes please do the following.
Double click on Emsisoft Emergency Kit
file on your desktop.
When the installation starts you see a image like the one below, click on Install.
The first time you launch it, Emsisoft Emergency Kit will recommend that you allow it to download updates. Please click Yes so that it downloads the latest database updates.
When the update is complete, click on MALWARE SCAN under Scan. When asked if you want the scanner to scan for Potentially Unwanted Programs, click Yes.
Emsisoft Emergency Kit will start scanning.
When the scan is completed click on Quarantine.
When the threats have been quarantined, click the View report button in the lower-right corner, and the scan log will be opened in Notepad. Copy the log and paste it in your topic.