Need help, unsure how to fix, might have hidden trojan

Viruses and worms
1

http://pdf-to-word-free.en.softonic.com/, its a exe

ya i was too hasty and downloaded this to update a old resume

running win10 with free version of avast

so i ran the exe and within a second avast stoped it, then recommened a restart and scan (in a safe mode i guess) wierd thing is it disappeared from my download folder as soon as it detected something harmful

so im looking in the folder now, supposedly im clean, pc runs good so far. but in my folder are 3 files listed, i can only see 2, so i keep trying to show hidden object and i cant see it, i cant find a avast log report on that whole event

running free avast version

2

It containe OpenCandy PUP crap
https://www.virustotal.com/en/file/c8b88e58c2b64994a31b41444afadb8048608b0b71bd6eb4d655726072df49be/analysis/1458162764/

3

I just started using that site and got the opencandy notice.

wierd thing is thats not what avast shown, and my dumbass didn’t write down the file it reported as harmful

and i ran cc afterwards to it deleted the log i think

its just driving me nutz now seeing 3 files in properties but there is only 2

i was trying to mess with the registry through command promt, still cannot not get this file to be visible

4
wierd thing is thats not what avast shown,
If you have not rebooted, right click avast tray icon and select show last popup
5

If you want a check, follow instructions >> https://forum.avast.com/index.php?topic=53253.0

6

i did few reboots, this is racking my brain right now, i haven’t had to mess with pcs since late 90s doing this.

something is there, its 282 bytes in that folder and god knows what else, i will try have to go right now

i might reinstall the exe to get the message and figure this out better

7

im abit confused by it, well this tell me what the file is.

8

hkey_local_machine\software\microsoft\windows\currentversion\run\adobe reader speed launcher

this was detected by avast when i ran a cleanup. its running at start up.

I did alittle searching, its a worm attached to other malwares and it embeds itself in the registry files.
earlier i had tried to change my registry values to show all hidden files but i couldn’t get it to work

i was using the command promt and regedit and messing with some values

9

Now i’ve noticed 3 registry folders in the wow6432node windows folder, cant remember any 32bit programs

10

Okay it was a super hidden file, desktop.exe with a weird translucent + plus over it, I had so many tabs open it was killing Firefox which is a first

I’m just going to do restore. Question is its a custom PC with a ssd, would I have to flash the bios even after I restored windows, which wouldn’t help, can I just wipe the ssd and just bios?

I wanted to try to use a hex editor on it but I decided to shut it off for now