Saturday I ran into a virus I can’t seem to get rid of. I noticed it directly as I got a popup about windows user account control had been disabled. I immediately cancelled everything, activated UAC again and did the following steps:
- Uninstalled all new programs via control panel (almost 10)
- Removed yessearches as the new homepage for browsers
- Checked for addons in browsers = none
- Updated and ran a scan on Spybot
- Updated and ran a scan on Avast
But the problem remained. Almost every program I start get this huge installer screen saying “Update to the latest version of….” (Outlook, VLC etc). As this pops up, Avast displays that it has blocked a threat origin from the temp folder (under c:\ or c:\windows). (Which it obviously hasn’t, as the installer still starts.)
I have downloaded Microsoft security scan, and when running a full scan it reports that it has only partially removed win32 Mizenote. I get no instructions on how to fully remove it.
I have tried to empty the temp folders that Avast says the virus origins from, but files are protected. I have also found a very suspicious chromebrowser.exe in my windows file with the same creation date as when the problem started, that neither can be removed, not even via cmd.
I have googled my eyes blue.
HELP! What is this? And more importantly, how can I remove it as Spybot, Avast and Microsoft security runs short?