"restart your computer to install important updates"

[binovc]

This appeared on my desktop today, it's obviously malware.  Can I get help to remove it?  Latest scan using Malwarebytes does not detect it.

WIN7 Professional.

Thanks.

[Maurice Naggar]

Hello.   My name is Maurice.  I will be guiding you.  Let me know what name you prefer to be addressed.  As we go along, always attach any reports / files I request from you.

Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.

You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to the disclaimer.
• Press the Scan button.

• It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've run it before it may not and you may need to select it manually
• Please attach both logs to your reply if possible. 
• To Upload  attachments please click the "choose files" at left-side bottom of the Reply box. Then browse to where your file is located and select it and click the Open button.   Then review the main body of your reply.  When ready & all set, click on the button " Submit Reply ".

 

Further and beyond that, Can you arrange to get and then attach a screen-grab-image of the message you say is / was on the "desktop" ?

Use the following how-to article  ( "take a Screenshot on Windows" )
https://lifehacker.com/how-to-take-a-screenshot-or-picture-of-whats-on-your-co-5825771

 

[binovc]

Hello Maurice, thanks for the reply.
Today this no longer appears in the notification area of my taskbar.  Do you think that we should continue and assume it has "gone into hiding"?  Or do you think it removed itself?
Unfortunately I didn't take a screenshot while it was present.
I downloaded FRST64 but have not installed it, waiting on your suggestion.
-Eric
 

[Maurice Naggar]

Just so you know, "FRST64" does not 'install'  like a regular application.  It is a on-demand stand-alone report tool.

I would just recommend a new scan with Malwarebytes for Windows.   after that, let me know the result of that scan.

[binovc]

Ran a scan, zero detections or quarantines.

[Maurice Naggar]

Thank you.      This should only take a few minutes.    

The Microsoft Safety Scanner  is a free Microsoft stand-alone virus scanner that  can be used to scan for & remove malware or potentially unwanted software from a system.

The download links & the how-to-run-the tool are at this link at Microsoft

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

Select " Quick " scan from the Scan Options.

Let me know the result of this.

The log is named MSERT.log 

the log will be at  C:\Windows\debug\msert.log

Please attach that log with your reply.

 

[binovc]

I ran MSERT, when finished it reported no issues.
I found msert.log, and it has a bunch of "scan errors." So not sure if it really gave me a clean bill of health or not...
Log attached.

msert.log

[Maurice Naggar]

The scan errors in that tool should be ignored.  They do not count.  What is more significant are the very bottom line results.  I recall you said the original issue has not happened any more.

[Maurice Naggar]

The Microsoft Safety Scanner reported no infection , no virus. We can wrap.up this case.  You may delete the downloaded file msert.exe

I wish you all the best.

[Maurice Naggar]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Please review the following for Tips to help protect from infection

Thank you