Found this file after running HJT

Discussion in 'Malware Help (A Specialist Will Reply)' started by b13pnoysentra, Nov 20, 2006.

  1. b13pnoysentra

    b13pnoysentra Private E-2

    This file was found on Startup by CCleaner, MSCONFIG, and HijackThis:

    O4 - HKLM\..\Run: [Removal_Company] C:\WINDOWS\saferemv.exe

    I just wanted to know if this is malware and is fine to remove. Thanks.
     
  2. chaslang

    chaslang MajorGeeks Admin - Master Malware Expert Staff Member

    Welcome to Majorgeeks!

    I assume you are saying you don't recognize it as something you installed. More than likely it is malware and is safe to remove. HijackThis creates backups anyway (assuming you install it properly as given in the READ & RUN ME sticky thread). The last time I saw a reference to this file it was sent to a bunch of online scanners but they did not detect anything wrong with the file. But that still does not mean it is safe.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds