I'm thinking if i turn on internet even just a single virus file can re-download its friends. My internet is still off though i wanna do multiple scans to make sure just in case.
So after the quarantine by Malwarebytes and deleting some files and stopping tasks in scheduler and task manager, i restarted the PC and everything seems back to normal. So whenever the other viruses would ( unwittingly) try to call their friend secretly, that pop up would appear saying kdeco is missing, so that error is actually a good thing). I went manually deleting specific files in system 32 (AND by the way, that KDECO was actually missing because karsepesky had deleted it after seeing it as a virus. Then Malwarebytes caught about 17 files and quarantined all (first time that Malwarebytes has been able to help me really in 7 years of use).
I cleared all settings in Kaspersky before i knew it it started reporting more files in temp. Using the info this virus (that i found on any run site) i was able to go registry by registry value deleting the ones edited.
PowerShell was able to ( forcefully) open cmd, task manager, task scheduler, startup apps, mscfg, regedit and more. Fortunately one guy here recommended using powershell. I WILL WRITE THIS BECAUSE A LOT OF PEOPLE WILL B FACING THIS VIRUS SOON.Īll crucial system functions were not working at all.