Threat GenericRXBO.ZD!tr

[Peter_Tran]

Hi,

I got this malware detected on one of my client's laptop. Using Forticlient now:

ICS-LPT-DAVDOM, GenericRXBO.ZD!tr , Detected at: 2019-08-11 20:56:46, Malware:GenericRXBO.ZD!tr found in C:\Users\ICS-ROPAU1\AppData\Local\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\LocalState\AppIconCache\125\Microsoft_AutoGenerated_{A7132A9A-3492-4FB4-5B3A-C354DC43F389} by realtime scan. Denied access to the file.

I tried delete the file/folder manually, disable cortana but malware still show up.

Can anyone help please,

PT