my Webroot Secure Anywhere 9.0.0.64 says its still infected these are the files it says to delete, which I haven't done.
c:\windows\winsxs\amd64_wpf-presentationfontcache_31bf3856ad364e35_6.1.7601.17514_none_63bf9c3e28cd9bfb\presentationfontcache.exe
c:\program files (x86)\norton pc checkup\engine\2.0.13.11\ccsvchst.exe
c:\windows\system32\spoolsv.exe
c:\windows\system32\driverstore\filerepository\kit38128.inf_amd64_neutral_22199224fc348b76\hkcmd.exe
c:\windows\system32\driverstore\filerepository\synpd.inf_amd64_neutral_6931e0bb99687f28\syntpenh.exe
c:\program files\windows defender\msascui.exe
c:\program files\synaptics\syntp\syntpenh.exe
c:\windows\system32\smss.exe
c:\windows\winsxs\amd64_microsoft-windows-smss_31bf3856ad364e35_6.1.7601.18933_none_0a49fe1a2fe256c3\smss.exe
c:\windows\system32\hkcmd.exe
c:\windows\sysnative\smss.exe
c:\windows\sysnative\spoolsv.exe
c:\windows\sysnative\hkcmd.exe
c:\windows\winsxs\amd64_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_3433cdb2d8563d50\spoolsv.exe
I'm going to shut it down and wait for your reply.