I have malware

MacMasterMac

Commendable
Feb 28, 2016
7
0
1,510
0
Yesterday (25th) I downloaded a program, google said it was infected but I ignored it and continued the download. I then ran the program and nothing happened, oh crap. 1 minute later I get spammed with "Powershell stopped working", random empty CMD's open up and dissapear, eventually it says Windows has crashed and the PC was shut down. I boot into safemode and did a virus scan and tried to remove the malware/virus. I restarted my PC and then downloaded Malwarebytes. It detected 114 virusses. Removed them, restarted PC. I log back in and I see Notepad is opened with a message:

[.ShellClassInfo]
LocalizedResourceName=@%SystemRoot%\system32\shell32.dll,-21787

I was freaking out.

I thought it was gone.
I typed tasklist in CMD and saw a task "gbije.exe" from "Ophiuran Epimyocardial". Looked on Google and it was malware.

Malwarebytes didn't detect it so I downloaded RogueKiller. It actually did detect gbije.exe and 27 other things! Now I was spectating gbije.exe in task manager and the location in the folder and click eliminate. The tasks shut down. But it was still stored in a folder! https://image.prntscr.com/image/ca1305754fe745be9907158b17a3a933.png
RogueKiller said I had to reboot to finish it and I did. I log back in and notepad is opened again
https://image.prntscr.com/image/c76dd18f35164a5c9320122a238e802c.png
I think I enabled it again because of the reboot and it was not removed in the folder. But I cannot find the task again.
https://image.prntscr.com/image/b9727fc64d074abb95e70e08f987955f.png
What do I do?

https://prnt.sc/fcen2s

 

gasaraki

Distinguished
Jun 11, 2008
61
0
18,610
9


System restore points don't work like that. Restore points DO NOT remove viruses because restore points don't remove files from drive.

If I make a restore point then make a word doc on my computer and then restore to my restore point my computer will still have the word file.

 
Thread starter Similar threads Forum Replies Date
Me. Opanak Antivirus / Security / Privacy 1
S Antivirus / Security / Privacy 1
DCB007 Antivirus / Security / Privacy 4
N Antivirus / Security / Privacy 5
Nighty_z Antivirus / Security / Privacy 5
Ginko-san Antivirus / Security / Privacy 37
K Antivirus / Security / Privacy 2
A Antivirus / Security / Privacy 1
L Antivirus / Security / Privacy 1
N Antivirus / Security / Privacy 6
F Antivirus / Security / Privacy 2
T Antivirus / Security / Privacy 2
G Antivirus / Security / Privacy 2
D Antivirus / Security / Privacy 1
A Antivirus / Security / Privacy 1
R Antivirus / Security / Privacy 1
C Antivirus / Security / Privacy 2
D Antivirus / Security / Privacy 3
A Antivirus / Security / Privacy 5
R Antivirus / Security / Privacy 3

ASK THE COMMUNITY