Cleaning up from 'Win 7 security' trojan

January 30, 2012

I recently got a virus/trojan called "Win 7 Security." Not sure how it made it past MSE, with all the definitions up to date... In any case, I followed the instructions at http://www.bleepingcomputer.com/virus-removal/remove-Win-7-Security-2012

However, I didn't have any problems running RKill without renaming, and it came up clean. Malware Bytes also didn't come up with any infected items.

After running these, of course I ran MSE, which came up with 3 infected items. This history lists that 2 were removed, however, 1 was allowed.

When I change the radio button to show "allowed items only," it doesn't show any items at all.

I looked up the location of the allowed item, and I can't find it (even when showing hidden files)

So, is my computer still infected? How can I be sure?

Thanks

Recommended Posts