1. Enable 'Show Hidden Files & Folders' per this tutorial => http://www.bleepingcomputer.com/tutorials/how-to-see-hidden-files-in-windows/#win7
The safest removal method for you is the auto removal with anti-malware tools. Method 2 – Manually Remove Genieo Malware with Expert Mac Skills (Complicated and Risky Method for Mac Expert). Malware, Adware, Spyware, Ransomware and other forms of viruses. Meanwhile, it can keep your Mac clean of junk files to maintain it at top. The Windows Malicious Software Removal Tool is a small, portable utility that checks Windows XP, 2000, Server 2003, Vista, and 7 for infection by a range of known threats, including Blaster. If you want to avoid the risk, we recommend downloading SpyHunter - a professional malware removal tool - to see whether it will find malicious programs on your PC. Download SpyHunter More information about SpyHunter and steps to uninstall.
2. In Windows Explorer [WinKey+E], navigate to and open...
- C:Windowsdebugmrt.log <=this file
3. Scroll to the very bottom/end of the log, then highlight & copy the last 3 or 4 entries to your clipboard.
4. Paste the contents of your clipboard into a reply to this post.
Example:
---------------------------------------------------------------------------------------
Microsoft Windows Malicious Software Removal Tool v5.16, September 2014 (build 5.16.10602.0)
Started On Tue Sep 09 22:07:51 2014
Malicious Software Removal Tool
Engine: 1.1.10904.0
Signatures: 1.183.882.0
Results Summary:
----------------
No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Tue Sep 09 22:09:43 2014
Return code: 0 (0x0)
---------------------------------------------------------------------------------------
Microsoft Windows Malicious Software Removal Tool v5.17, October 2014 (build 5.17.10700.0)
Started On Wed Oct 15 18:22:05 2014
Engine: 1.1.11005.0
Signatures: 1.185.2035.0
Results Summary:
----------------
No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Wed Oct 15 18:24:59 2014
Return code: 0 (0x0)
---------------------------------------------------------------------------------------
Microsoft Windows Malicious Software Removal Tool v5.18, November 2014 (build 5.18.10802.0)
Started On Wed Nov 12 20:32:20 2014
Engine: 1.1.11104.0
Signatures: 1.187.1116.0
Results Summary:
----------------
No infection found.
Microsoft Windows Malicious Software Removal Tool Finished On Wed Nov 12 20:34:21 2014
Return code: 0 (0x0
Microsoft offers a number of free anti-malware tools. Windows 10 and 8.1 users have Windows Defender. Windows 7 users can chose between the full-featured Microsoft Security Essentials (MSE) or the limited Windows Defender. But all Windows users have access to the Malicious Software Removal Tool (MSRT) even though they may not be aware of it.
MSRT is part of the monthly patch Tuesday bug fixes. Windows Update downloads a new version of MSRT and runs a scan with it as part of its normal processing. The last patch Tuesday was May 9th and Microsoft dutifully issued a new version of MSRT.
I mention this because on May 23rd someone contacted me to ask why MSRT had just been updated. He had seen a new version appear in Windows Update on a 32 bit Windows 7 machine that had been dutifully updated on the 9th.
I checked a 64 bit Windows 7 machine that had been updated on the 21st. Sure enough, running Windows Update on the 25th, installed a new version of the software (shown above).
Microsoft Malicious Spyware Removal Tool
The May 9th release was version 5.48.13801, the May 22nd edition is version 5.48.13803. The May 9th edition is 149MB (156,335,152 bytes), the May 22nd version is 126MB (132,223,576 bytes).
Microsoft Malicious Spyware Removal
What changed? Initially, Microsoft didn't say, the home page for MSRT, had not been updated as of the 25th.
However, when asked, a company representative said that the May 22nd update was 'to detect and remove WannaCrypt malware.' WannaCrypt is another name for WannaCry.
You can run MSRT manually by simply typing 'MRT' into the Run box. Or, you can find it at C:Windowssystem32MRT.exe
When you run it manually, the initial window has a link to 'View a list of malicious software that this tool detects and removes.' The May 22nd version includes Win32/WannaCrypt in this list, the May 9th version does not.
Running it manually offers the option of a Full scan. When its run as part of Windows Update, it only does a Quick scan.
MSRT can be downloaded at any time from here. The 32bit edition is currently Windows-KB890830-V5.48.exe, the 64 bit edition is Windows-KB890830-x64-V5.48.exe.
A nice thing about MSRT is that it's portable. You make a copy of MRT.exe on a non-infected PC, rename it to SomethingElse.exe for good luck, and run a full scan with it on an infected machine. Can't hurt.
On the other hand, MSRT is very limited in scope. The page documenting the malware it targets (see above), shows only two strains were added in all of 2017.
FEEDBACK
Online Malicious Software Removal Tool
Get in touch with me privately by email at my full name at Gmail or publicly on twitter at @defensivecomput.