Windows 10: How do you remove infected files permanently from Windows?

So I had 3 severely malicious files Defender detected: 1. Hacktool: AutoKMS 2.Trojan: Leonem 3.VirToolefenderTamperingRestore. I noticed something was wrong when I found out my Win Defender was turned off; it didn't even notify me or anything I was just in settings and found out. I couldn't turn it on; I saw controlled folder access and core isolation and everything was off. I used Group Policy Editor to turn everything back on, even going as far as to give all the permission and power Defender needed to prevent any and all threats. But I think the damage was done; it somehow embedded itself

:)

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

 

Removal program (MSRT) doesn't remove Infected files

Bernie,

The Malicious Software Removal Tool (MSRT) is quite a useless and antiquated tool which tends to throw all kinds of errors and misinformation...

Suggestion to read these threads (especially the posts of Rob Koch and quietman and GreginMich) which are explaining a bit about the "usefulness" of the MSRT...

I, personally, never even download/use it...

• Redirecting
• Redirecting
• Redirecting

 

steps taken for infected Pc's.


I was hoping someone could give me a list of step by step instructions you use as a guide to clean virus, malware...etc. so I can keep my PC clean if it gets infected.

thx