Report Offensive Message
I've run into one recently that was a variant on the AntiVirus 2010, it deleted mbam.exe file, locked out the ability to invoke task manager, msconfig and regedit. Upon suggestion, i copied a working mbam.exe file over to the PC while in safe mode and it still wouldn't run, acted as if it were hung up. I located the process responsible, deleting it by booting BartPE live CD, but their must have been a sneaker that dropped the process back in. Ultimately I spent a couple work days futilely trying to rid the PC of the infection and ended up wiping and reinstalling.