Pogo123

My question applies to winrmsrv.exe. I do not want to restore the quarantine items. Is there a way to do the virus lab without restoring the files?

I think that was a different full scan that I stopped. I attached a image of the quarantine. There was a yellow “not a virus” one in there also but I clicked delete on that one. I believe it was this one: 23.12.2019 20.18.04;Object (file) not processed;C:\Windows\System32\winrmsrv.exe;Kaspersky Anti-Virus;C:\Windows\System32\winrmsrv.exe;12/23/2019 20:18:04;not-a-virus:HEUR:RiskTool.Win32.Generic;Allowed by user I am not sure why this is listed as not a virus or why it is allowed. How do I un-allow and disinfect that file?

The full scan is still running. I have attached the report.

I tried reinstalling but got a install failure. I then uninstalled kaspersky internet security (The VPN) and restarted. After the restart I tried again and it was installed correctly. I only just barely noticed that kaspersky was gone. When I restarted my PC I was up and away. I noticed some kind of warning message but before I could see it Windows had already closed it and started the restart. It was probably a Kaspersky message saying the update failed. After reinstalling, it found VHO:Trojan.Win32.Miner.adlqr on winlogui.exe and Backdoor.Win64.Agent.gen on startupchecklibrary and winscomrssrv

On Windows 10 today, I had a Kaspersky notification say it installed some modules and need to restart to apply them. I restarted and now kaspersky is gone. I still have the shortcuts but I get ‘avgui’ has been changed or moved.