I was running Avira Anti-Virus, Malwarebytes and Super Anti-Spyware and still got it!
Other sites mentioned that it is a three-letter.exe program. In my computer it showed up as qbs.exe or something like that and I'd hit "end process" in Task Manager and it would go away but then come back as soon as I clicked anything else. Is it possible to actually remove a program in Task Manager?
I've always been leery of messing around in the registry editor but if this does come back - or is in there now, I'll delete any three-letter.exe file. Are there no legitimate three-letter.exe files?
Thanks again.
Avast or AVG are better than Avira, IMO
There is an exe in user/AppData/Local that is the malware. It is most likely in your startup too. The name of the exe is typically 2 characters, it is randomly generated. Find and delete the exe and remove it from startup. Hope that helps. If it reappears bring up task manager click on the process and then ask for proteries that should give you the location of the exe.
you have to find out what it is called and search for that three letter program in the registry
that is the only way to remove it permanently