Solved Persistent virus: infected svchost & MSASCuiL?

[Hi Van]

How is your computer behaving now?

It's normal right now, and hopefully would stay like so. Except that Hitman Pro still detects "MSASCuiL.exe" under the Windows Defender program file as a virus. Also, every time I open the computer the command prompt flashes (opens and closes for like a second). Although I can't immediately claim that it was caused by a virus, it's not normal, right? Idk, it just bothers me. Haha.

All in all, I would have to wait if anything else shows up. Because in the past I did some scans and cleaning and I thought I was all good. After some days it came back. With that said, I might have to report to you again in a few days.

 

[Hi Van]

How is your computer behaving now?

Oh, and may I ask what were the actual fixes made by FRST?

 

[TwinHeadedEagle]

There was one unwanted proxy setting and some leftovers, that's it.

 

[Hi Van]

There was one unwanted proxy setting and some leftovers, that's it.

Alright, how do I fix the MSASCuiL and command prompt issue tho? By any chance, could Hitman Pro label MSASCuiL as harmful when it really isn't? Though I doubt it...

 

[TwinHeadedEagle]

You need to show me the Hitman pro detection so I can tell you. What is happening with Command Prompt?

 

[Hi Van]

You need to show me the Hitman pro detection so I can tell you. What is happening with Command Prompt?

The command prompt is not a big issue (hopefully), its just that every time I boot the computer it open for like a second and closes. It just bothered me cause that ain't normal, right? As for the Hitman pro detection, attached below is a screenshot of it. I already tried "replacing" it as it is the only option, but nothing happens. I also tried deleting it but the systems say it cannot be deleted. Softwares made for forceful deletion also cannot delete the file. I tried IOLocker and LockHunter as of now.

 

[TwinHeadedEagle]

MSASCuiL.exe is the part of Windows Defender. I don't know why is HitmanPro detecting it, probably a false positive.

 

[Hi Van]

MSASCuiL.exe is the part of Windows Defender. I don't know why is HitmanPro detecting it, probably a false positive.

That's what I thought as well. I also thought that what if the virus infected the MSASCuiL.exe, but yeah, maybe it's a false positive? I'll just report it as safe. Thanks so much, TwinHeadedEagle!