Look @ Taskmanager.You have a new process.There name is pockapocka.exe.The folder of it is in windows/etb.You can not delet normal.You need this one ETRemover_v212.You must make it in safe mode.It works.I have test it.When the process is not killed go in safe mode again and delete the folder manuel.Then look in startup manager and kill him too.