Solved File Name.exe and svchost.exe virus?

[BryanJames16]

Hello.

My friend borrowed my laptop earlier this morning and he returned it to me after 3 hours. Upon checking my laptop status, I saw to new processes: File name.exe and svchost.exe. I end it's processes and check the msconfig. I saw two new checked start-up entry: svchost.exe and Windows Application. On command tab, I tried tracing the windows application start-up entry. It is located on Appdata\Roaming\File Name.exe. But when I search it, File Name.exe doesn't seem to exist. Also, I tried searching the location of svchost.exe (Appdata\Local\Temp\svchost.exe). But it doesn't exist too. I tried un-checking the two unknown start-up entry. But whenever I click "apply" button, the two entry will automatically be checked. Also, I did run my antivirus (ESET Smart Security 7). It found 4 virus on Operating Memory. The virus was named as "chrome.exe(4044)" located in operating memory and was recognized as Win32/Spatet.T trojan. My AV says that it has been cleaned. But whenever I scan it again, the chrome.exe(4044) is still there.

Thanks!

 

[Tookeri]

You could try this: http://www.sevenforums.com/tutorial...r-virustotal-check-all-processes-50-av-s.html
See step 9 on how to kill multiple suspicious processes

To go deeper than msconfig: Autoruns for Windows

 

[BryanJames16]

Done. Thank you very much! I found plenty of hidden virus on my AppData Temp folder. The viruses has been deleted by my AV with the use of the tool you gave. Thank you very much.

 

[Tookeri]

Great, glad I could help! But I advice you to scan with other products as well, for a "second opinion".