Windows 10: Can't Remove Win32.EXE ab.exe virus

hello i can't seem to remove the Win32.exe ab.exe virus i went on Virustotal website and typed in my computer's ip address and it says 1 detecting files communicating with this ip address. and that's where it says the WIN32.EXE ab.exe virus i need to remove it. any help would be awesome thanks.

:)

 

NESHTA.A VIRUS REMOVED BUT .EXE NOT WORKING (active conversation)

WINDOWS DEFENDER OFFLINE SCAN AVG (https://www.avg.com/pt-br/remove-win32-neshta) REMOVED NESHATA.A VIRUS BUT NOW .EXE APPS NOT WORKING

TASK MANAGER SAYS APPLICATION NOT FOUND

CHROME SAYS YOULL NEED APP TO OPEN THIS .EXE AND I GAVE IT CHROME .EXE LOCATION IT WORKED FOR THIS ONE

BUT TASK MANAGER ITS JUST ERROR CAN DO ANYTHING BUT ! WHEN I RUN AS ADMINSTATOR IT WORKS

AND THERE IS WINDOWS MOBILITY CENTER NOW WORKING "APPLICATION NOT FOUND " THATS THE MESSEGE THAT I GET WHEN I OPEN IT FROM THE BATTERY ICON BUT WHEN I OPEN IT FROM WINDOWS MENU IT JUST WORKS

ALL .EXE APPLICATIONS ARE LIKE THIS

AND POWERSHELL WITHOUT ADMIN THis file does not have a program associated with it for performing this action. Please install a program or, if one is already installed, create an association in the Default Programs control panel.

BEFORE ALL THAT I DIDNT KNOW I HAD THIS VIRUS SOME APPLICATION JUST DONT OPEN NTHN HAPPENS LIKE TASK MANAGER IT ONLY WORKS WITH RUN AS ADMIN

Hi Rose:

Rose Cal - Microsoft Community

Just to give you a response to the questions in original publication: https://answers.microsoft.com/en-us...-working/da56ba2a-57c7-4269-b510-8c2704ca3f92

• Does this happen with a specific application or with all of your application?

All applications. SEEMS TO BE A PROBLEM WITH .LNK FILES REGISTRY.

• Have you tried creating a new admin account to check if the issue also with new account or only with the current account?

Do not Work.

Could you give us some luminous ideas about how to resolve this issue?

 

NESHTA.A VIRUS REMOVED BUT .EXE NOT WORKING

Hi Khaled,

It is possible that you .exe is not working due to corrupted system files or account. To assist you better, kindly answer the following questions:

• Does this happen with a specific application or with all of your application?
• Have you tried creating a new admin account to check if the issue also with new account or only with the current account?

In the meantime, we suggest that you follow the steps in this article on how
to create a new admin account.

Let us know if you need further assistance.

 

Malware tprdpw64.exe after installing 7zip

Thank you for the reply and the suggestions. However neither link provided a working solution. I followed each set of instructions step by step, to the T, but the viruses are still there.

I killed the processes with Rkill as instructed, and it found and ended the malware process `tprdpw64.exe`. It, however, did nothing
about the adware `svcvmx` & `svcvmx client` processes. After doing so I downloaded and installed Zemana, as instructed, and let it do a full system scan. Might I add that this took over
10 hours to complete, as I have 1,396,541 files on my PC, so this whole thing wasted nearly half a day of my time with no results.

Zemana detected the malware virus `tprdpw64.exe` located at "C:\WINDOWS\System32\tprdpw64.exe"
(among other, smaller "threats"), and labeled it as malware. After it finished the scan, it said it has placed all files into quarantine, including `tprdpw64.exe`.
However, when checking the quarantine list `tprdpw64.exe` is
not listed. I then decided to have Zemana remove the files in the
quarantine list from my system and then rebooted my PC. It removed them all successfully, except for `tprdpw64.exe`
which is still on my system, and still runs (I can still see it in task manager after rebooting). So the 10+ hours of waiting were all for nothing.

I then used Zemana's "drag-and-drop" feature to re-scan just `tprdpw64.exe`
(in order to not have to wait 10+ hours again). It scanned it, and now says the file is not a threat (but it clearly is).

I then proceeded to step 2, using AdwCleaner to remove the adware. This did not work in the slightest. AdwCleaner did not detect the adware virus at all, and thus did nothing about it. I still cannot remove the viruses manually, either. However for some
reason, the adware `svcvmx` & `svcvmx client` processes no longer seem to run (my PC has been on for about an hour, and the processes
have yet to startup). However, even so the files are still on my file system and would like to delete them.

EDIT

I have just searched my registry, looking for any possible signs of tprdpw64 being listed, and there was nothing there.