Sunday, March 7, 2010

How to remove backupuser.exe malware

Backupuser.exe is a malware/virus in computer that will automatically creates autorun.inf and backupuser.exe in all drives and external storage such as USB drive that plug in to the infected PC

Follow the Steps below to remove the Malware

Access computer using Admin 

Press F8 during windows startup, enter Safe Mode

Unhide the hidden folder, system files


C:\Program Files\Common Files\microsoft shared\MSInfo\


Uninstall Information.exe



del Uninstall Information.exe

Create a New Folder and rename it as "Uninstall Information.exe"

Goto C:\WINDOWS\help\

del svchost.exe



del windows_Update.exe

Go to Root Directory of all Volumn such as C, D and E if any.

del System Volumn Information.exe
del Autorun.inf

Create a New Folder and rename it as "Autorun.inf"

Using HijackThis to scan
and remove the service below

Service: Windows_XP - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSINFO\backupuser.exe
Service: Windows_Uninstall_Information - Unknown owner - C:\WINDOWS\system32\Uninstall Information.exe

Restart Your Windows

No comments:

Post a Comment