Can someone help me remove a trojan by the name ReasonLab.

Question

Can someone help me remove a trojan by the name ReasonLab.

Anonymous

Can someone help remove a parasite by the name ReasonLab RVA cybersecurity which installed itself on my machine. Here is what I did: Went to Add/Remove progs, uninstalled it, went into registry and hunted every singles one of its values. For some I had to go back to task manager to kill their processes before I could completely delete them from the registry thus enabling me to completely delete the parent folder in Programs folder. I have done pretty much of removing many of its processes but now it is rooting in my registry as follows: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\ and it's coming in as {ED4D1201-4876-7014-6F49-4BC9DA784B64}. I never gave it authority of any sort, I tried to remove it is declining me permission, I went to try and remove inherited permissions and I could not take the permissions away from it says access declined. This Trojan is really giving me a headache.

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

1 answer

Answer 1

Please run the Farbar Scanner and share your logs.

Download Farbar Recovery Scan Tool (FRST64.exe) [See also: Collect Farbar Recovery Scan Tool logs.]
Rename FRST64.exe to EnglishFRST64.exe.
Run the program. Don't check or uncheck any options. Click "Scan".
Upload the two logs, FRST.txt and Addition.txt, to your OneDrive and share the link here.

(How-To: Share OneDrive files and folders - Microsoft Support)

Note: If Microsoft Edge or Chrome mislabels the Farbar Scanner executable as PUA/malware, choose to keep it by tapping … in the bottom bar, choosing Keep, and then choosing Keep anyway in the dialog that appears.

Share via

Can someone help me remove a trojan by the name ReasonLab.

1 answer