I think I had this fake scanner on my laptop. As far as I know this is not a virus but fake security software. Anyway, it hides in C:\ProgramData\ folder. There was a randomly named folder like "hGdKHt0842", inside that folder there was a file with hGdKHt0842.exe. You can't just delete this file because the virus is active, but you can rename it. I renamed the file and the folder.
It should be C:\ProgramData\virus\virus1.exe instead of C:\ProgramData\hGdKHt0842\hGdKHt0842.exe Then I restarted my computer and MS Removal Tool didn't show up. Finally, I deleted the entire folder and ran malwarebytes. I use this program if I have problems with my PC.
http://malwarebytes.orgWell, I hope this helps. Couldn't find anything about this fake scanner, except this blog post
http://deletemalware.blogspot.com/2011/03/how-to-remove-ms-removal-tool-uninstall.html and some forum threads. Cheers!
By the way, if you have Windows XP, look for randomly named folder in C:\Documents and Settings\All Users\Application Data\ folder.
Printer-friendly format
Email this thread to a friend
Bookmark this thread
(1000+ posts)
Send PM |
Profile |
Ignore
