I can't delete this folder which contain virus, it keeps being recreated when deleted [duplicate]
This question already has an answer here:
How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?
19 answers
So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.
so this folder is recreated and begin the process when deleted? I don't know
anyone know how to actually delete this folder? or trace back what caused it to be recreated?
edit:
i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use
windows-10 virus-removal malware-removal
marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
add a comment |
This question already has an answer here:
How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?
19 answers
So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.
so this folder is recreated and begin the process when deleted? I don't know
anyone know how to actually delete this folder? or trace back what caused it to be recreated?
edit:
i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use
windows-10 virus-removal malware-removal
marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
add a comment |
This question already has an answer here:
How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?
19 answers
So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.
so this folder is recreated and begin the process when deleted? I don't know
anyone know how to actually delete this folder? or trace back what caused it to be recreated?
edit:
i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use
windows-10 virus-removal malware-removal
This question already has an answer here:
How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?
19 answers
So today I was desperate to find a space for my c drive since I want to install something new. in that case I'm scanning my c drive for extra space. and I found this weird folder with weird content. I don't think far so I just delete it. suddenly, I can't use firefox because of certificate issue. I already sorted this out, fortunately. apparently, there is this process going on ZGU5ODFhYThhMjNkMT.exe that make firefox detect it as a man in the middle. I recognize that name which is from the weird folder I deleted. when I open c program files again, I found the weird folder is still there.
so this folder is recreated and begin the process when deleted? I don't know
anyone know how to actually delete this folder? or trace back what caused it to be recreated?
edit:
i found that my windows defender keeps adding exceptions for these folder/programs. so windows defender scan won't be any use
This question already has an answer here:
How can I remove malicious spyware, malware, adware, viruses, trojans or rootkits from my PC?
19 answers
windows-10 virus-removal malware-removal
windows-10 virus-removal malware-removal
edited Dec 24 '18 at 6:06
LucasLucas
asked Dec 24 '18 at 0:18
LucasLucasLucasLucas
12
12
marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
marked as duplicate by Run5k, Scott, Ramhound, DrMoishe Pippik, Dave M Dec 24 '18 at 13:13
This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!
add a comment |
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!
add a comment |
First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!
add a comment |
First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!
First, go to Task Manager, and see if cmd.EXE is running. If it is, end it. It can recreate files when you delete them. After that, go to your 'Startup' folder and see if there is a bat, vbs, and/or cmd file (or any unknown files), then delete them (after ending CMD). After this, delete the folder (NmE3YmY3ZDI), and restart. If it's still there, don't hesitate to leave a comment. Hope your PC gets better!
answered Dec 24 '18 at 5:22
GrizzlyGrizzly
63
63
add a comment |
add a comment |