New
#1
Need help with recurring virus
Hi guys, a couple weeks ago I was watching a stream on twitch.tv and my browser closed and a fake Windows Security Center popped up and started running a scan telling me I had to get the premium Windows security (I don't recall the exact name of what it was telling me I needed to get). Anyway I opened the task manager and saw a bunch of processes called "aak.exe" running so I figured that was the virus. I used "end process tree" to shut them all down then tried to run Avira (I had Avira and PrevX3.0 both running on my machine at the time). When I tried to open any program (Firefox, any program) it immediately hijacked that command and the fake antivirus started scanning again. I again shut it down with task manager and each time I tried to open something I'd have to go through the whole "open with" process and find the launcher. In the mean time I ran scans with Avira and PrevX3.0 and both found no problems so I opened firefox again to get the virus prompt and found the location of the .exe file from the task manager (it had put aak.exe into the C:\users\xxxxxx\AppData\Local folder). I deleted aak.exe and then tried to open Firefox again, but again had to go through the "open with" process. I downloaded CCleaner thinking the virus had forced all my applications to run through the aak.exe location which I had deleted. I cleaned my registry and everything worked fine so I figured I had gotten rid of it.
A week later the same problem occurred but instead of it been aak.exe it was running through ibh.exe. The file was in the same location and I took the same steps to temporarily fix it.
Since then I've run Lavasoft's AdAware and Avast and both have come up clean. Anyone have any help before I have to take that horrible plunge and reformat?