I can't delete this folder which contain virus, it keeps being recreated when deleted [duplicate]












0
















This question already has an answer here:




  • How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

    19 answers




So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.



so this folder is recreated and begin the process when deleted? I don't know



anyone know how to actually delete this folder? or trace back what caused it to be recreated?



edit:
i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use



enter image description here










share|improve this question















marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13


This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.























    0
















    This question already has an answer here:




    • How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

      19 answers




    So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.



    so this folder is recreated and begin the process when deleted? I don't know



    anyone know how to actually delete this folder? or trace back what caused it to be recreated?



    edit:
    i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use



    enter image description here










    share|improve this question















    marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13


    This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.





















      0












      0








      0









      This question already has an answer here:




      • How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

        19 answers




      So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.



      so this folder is recreated and begin the process when deleted? I don't know



      anyone know how to actually delete this folder? or trace back what caused it to be recreated?



      edit:
      i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use



      enter image description here










      share|improve this question

















      This question already has an answer here:




      • How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

        19 answers




      So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.



      so this folder is recreated and begin the process when deleted? I don't know



      anyone know how to actually delete this folder? or trace back what caused it to be recreated?



      edit:
      i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use



      enter image description here





      This question already has an answer here:




      • How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?

        19 answers








      windows-10 virus-removal malware-removal






      share|improve this question















      share|improve this question













      share|improve this question




      share|improve this question








      edited Dec 24 '18 at 6:06







      LucasLucas

















      asked Dec 24 '18 at 0:18









      LucasLucasLucasLucas

      12




      12




      marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13


      This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.









      marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13


      This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
























          1 Answer
          1






          active

          oldest

          votes


















          -1














          First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!






          share|improve this answer






























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            -1














            First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!






            share|improve this answer




























              -1














              First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!






              share|improve this answer


























                -1












                -1








                -1







                First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!






                share|improve this answer













                First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Dec 24 '18 at 5:22









                GrizzlyGrizzly

                63




                63















                    Popular posts from this blog

                    Список кардиналов, возведённых папой римским Каликстом III

                    Deduzione

                    Mysql.sock missing - “Can't connect to local MySQL server through socket”