If your malware infection persists even after you’ve updated your antimalware software, performed deep scans, and employed a second opinion scanner, you may have to resort to the following additional steps.
Malware scanners running at the operating system level may be blind to some kinds of infections that hide below the OS level in system drivers and in areas of the hard drive where the OS can’t access. Sometimes the only way to detect and remove these types of infections is by running an Offline Antimalware Scanner.
If you’re running Microsoft Windows, there is a Microsoft-provided free offline malware scanner tool that you should run to check for and remove malware that may be hiding at a lower level.z
The Windows Defender Offline scanner should be one of the first tools you use to try and eradicate a persistent malware infection. It runs outside of Windows so it may have a better chance of detecting hidden malware that is associated with persistent malware infections.
From another (non-infected) computer, download Windows Defender Offline and follow the instructions for installing it onto a USB flash drive or onto a writable CD/DVD. Insert the disk into your CD/DVD drive or plug the USB Flash Drive into your computer and reboot your system.
Make sure your system is set to allow booting from the USB drive or CD/DVD, or your PC will skip the USB/CD drive and boot as normal. You may need to change the boot order in the system bios (usually accessible by pressing F2 or the “Delete” key on startup of your PC).
If your screen shows that Windows Defender Offline is running, then follow the instructions on the screen for scanning and removing malware. If Windows boots as normal, then you will have to reboot and ensure that your boot device is set to USB or CD/DVD.