Hello, Sam

Have you considered performing a System Restore to a date before this problem occurred? System Restores do NOT remove user created data.

A System Restore will return the Windows Registry to the selected point in time - the date of the chosen System Restore. NO user created data is lost.

A Factory Restore will return the system to "fresh from the manufacturer". ALL user created data is lost unless back up prior to performing the Factory Restore.

I would need to know your Operating System in order to provide Step by Step instruction.

As this is Microsoft's tool, I'll let them provide the instruction. Please see this MS KB article.

Once you have PhotoShop working again, do be sure to bring your Windows installation up to date with Service Patches. Maintaining currently Windows Updates will ensure your Operating System is running at its most secure.

Do you have Malwarebytes installed? If so, I would like you to make sure your definitions are up to date and give your PC a quick scan.

Give a couple of other restores a try. I have had as many as 5 fail, but the 6th took.

Let me ask Crush from PCHF Security to have a view here to see if perhaps your issue might be related to the prior malware troubles.

One of us will be back with you shortly. Thanks for your patience, Sam!

Ramnit is a polymorphic file infector. If you haven't reinstalled your OS recently then that's what you must do, deleting all partitions and reformatting

The first component is a backdoor trojan, which is a type of trojan that communicates with a hacker: to transfer personal information about you, use your computer to help perform a denial-of-service attack, redirect your internet searches in order to make money off of your browsing habits, and can be a keylogger to steal personal identifiable information to help rob your identity.

The second component is a rootkit, which is a type of malware to take control over your computer at administrator access, having full permission to modify all of your device drivers, and allowing itself to hide all the malware on the system. In other words, it is a hackers way of taking control of your computer, and hiding in the dark at the same time. This is a prime initiative of hackers to help keep access to your computer, robbing all of your personal information, and using your computer to send spam across the internet.

The third component is a file infector, which is a type of virus to purposely damage as many files as possible, in order to keep control of your system, so you have as little access as possible.

Not only has your system been compromised severely, it is also highly damaged, and if you do not commit to my suggested removal method below, then your computer may not function anymore.

If you do any banking or other financial transactions on the PC or if it should contain any other sensitive information, please get to a known clean computer and change all passwords where applicable. Do NOT change passwords or do any transactions while using the infected computer because the attacker may get the new passwords and transaction information. (If using a router, you need to reset it with a strong logon/password so the malware cannot gain control before connecting again.) Banking and credit card institutions should be notified to apprise them of your situation (possible security breach). To protect your information that may have been compromised, I recommend reading these references:

• How Do I Handle Possible Identify Theft, Internet Fraud and CC Fraud?
• What Should I Do If I've Become A Victim Of Identity Theft?
• Identity Theft Victims Guide - What to do

For this variant, there is no removal method unfortunately