Reply to thread

Message

<blockquote data-quote="xtcmax" data-source="post: 708110" data-attributes="member: 69571"> <a href="https://malwaretips.com/members/twinheadedeagle.6533/" target="_blank">TwinHeadedEagle</a>,thank you very much for your assistance. I am sorry for late response, I had to find a second PC, which I found and it is ancient.So, I ran the FSRT from clean USB and after I booted into the normal mode on the infected PC the virus has been cleaned, even the log shows it. If that is the case, I am just jumping in joy because I don&#039;t have to re-install Windows due to a lot of graphical stuff installed. I have noticed I had the spyware in my root Windows directory, which I googled and removed the files manually from the directory.<a href="https://support.avg.com/answers?id=906b0000000DJFZAA4" target="_blank">SECOH-QAD.exe &amp; .dll</a>Where were these files moved or were they deleted? (these are the virus files)&quot;HKLM\System\ControlSet001\Services\idbakrvs&quot; =&gt; removed successfullyC:\Windows\System32\drivers\usahlorv.sys =&gt; moved successfullyC:\Users\xtcmax\AppData\Local\dtbxnwv\niocpvr.exe =&gt; moved successfullyC:\Users\xtcmax\AppData\Local\pwslger\pwslger.exe =&gt; moved successfullyC:\Users\xtcmax\AppData\Local\pwslger\upabzik.exe =&gt; moved successfullyIncluded is the new .log file per your request.</blockquote>

[QUOTE="xtcmax, post: 708110, member: 69571"] [SIZE=4][B] [URL='https://malwaretips.com/members/twinheadedeagle.6533/']TwinHeadedEagle[/URL][I],[/I][/B] thank you very much for your assistance. I am sorry for late response, I had to find a second PC, which I found and it is ancient.[/SIZE] [SIZE=4]So, I ran the FSRT from clean USB and after I booted into the normal mode on the infected PC the virus has been cleaned, even the log shows it. If that is the case, I am just jumping in joy because I don't have to re-install Windows due to a lot of graphical stuff installed. I have noticed I had the spyware in my root Windows directory, which I googled and removed the files manually from the directory. [COLOR=#ff0000][B][SIZE=4][URL='https://support.avg.com/answers?id=906b0000000DJFZAA4']SECOH-QAD.exe & .dll[/URL][/SIZE][/B][/COLOR] Where were these files moved or were they deleted? (these are the virus files) "HKLM\System\ControlSet001\Services\idbakrvs" => removed successfully C:\Windows\System32\drivers\usahlorv.sys => moved successfully C:\Users\xtcmax\AppData\Local\dtbxnwv\niocpvr.exe => moved successfully C:\Users\xtcmax\AppData\Local\pwslger\pwslger.exe => moved successfully C:\Users\xtcmax\AppData\Local\pwslger\upabzik.exe => moved successfully [/SIZE] [SIZE=4]Included is the new .log file per your request.[/SIZE] [SIZE=4][B] [/B][/SIZE] [/QUOTE]

Verification