How to remove backupuser.exe malware

Backupuser.exe is a malware/virus in computer that will automatically creates autorun.inf and backupuser.exe in all drives and external storage such as USB drive that plug in to the infected PC. 


Follow the Steps below to remove the Malware

Access computer using Admin 

Press F8 during windows startup, enter Safe Mode
 
Unhide the hidden folder, system files

goto

C:\Program Files\Common Files\microsoft shared\MSInfo\

del

backupuser.exe
_backupuser.exe
Uninstall Information.exe

Goto
 
C:\WINDOWS\system32\

del Uninstall Information.exe

Create a New Folder and rename it as "Uninstall Information.exe"

Goto C:\WINDOWS\help\

del svchost.exe

Goto
 
C:\WINDOWS\system\

del windows_Update.exe

Go to Root Directory of all Volumn such as C, D and E if any.

del System Volumn Information.exe
del Autorun.inf

Create a New Folder and rename it as "Autorun.inf"

Using HijackThis to scan
and remove the service below
 
Service: Windows_XP - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\MSINFO\backupuser.exe
 
Service: Windows_Uninstall_Information - Unknown owner - C:\WINDOWS\system32\Uninstall Information.exe

Restart Your Windows