system
19
Mind you, I don’t actually think it removes the virus. It’s attached to some kernal32.dll.
I’m just using some context clues, because when I ran the scan and attempted to fix it, I noticed it moved kernal32.dll from system32 to the quarantine.