Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Help With This Strange "program win32/hadsruda!bit" MSE Defection

22 Mar 2016   #1
16BitMurderer

Windows 7/10 64 Bit
 
 
Help With This Strange "program win32/hadsruda!bit" MSE Defection

I help some friends folks out with minor computer troubleshooting but when a friends dad brought me his laptop (Acer 5580) he said he kept getting the detection from MSE about a "program win32/hadsruda!bit"

I have never seen this virus/error and whatever I search it seems to go to some post about removing toolbars and using something called spykiller or something. It looks like more of a advertisement then anything.

He did give me info regarding what he could remember DL'in and i knew he been doing torrents ha ha but from what I gathered it could be related to a activate crack of office or windows (which he is already has real copies of) but for some reason MSE fails removing it, Malwarebytes can't find and can't find any info about it.

Is this a false negative or what ha ha


My System SpecsSystem Spec
.
22 Mar 2016   #2
16BitMurderer

Windows 7/10 64 Bit
 
 

All sorted. ran MSE in safe mode and this time it actually got it.
My System SpecsSystem Spec
22 Mar 2016   #3
derekimo

Microsoft Community Contributor Award Recipient

 
 

False negative? I think you mean false positive. No it's not.

Here's a Microsoft page for that file,

https://www.microsoft.com/security/p...2/Hadsruda!bit

That other one is for hacking activation, you need to get rid of that too.

That's what can happen when you try to get something free, you're lucky if that's all you got.
My System SpecsSystem Spec
.

Reply

 Help With This Strange "program win32/hadsruda!bit" MSE Defection




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Security Essentials can't remove/quarantine "Adware:Win32/FastSaveApp"
Hi there Each time I switch on my PC Security Essentials flags up an medium alert (status active) concerning a detected item - "Adware:Win32/FastSaveApp". I've applied the action "Quarantine" and "Remove", each time Security Essentials completes the operation and tells me to restart my PC. ...
System Security
How can I be sure if I am still infected with "Win32/Small.CA" virus".
Hi I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus". I am running MSE (Microsoft Security Essentials) on Windows 7 Pro (x64). So I did an update followed by a full scan using MSE. I then ran - Malware Anti-Virus - SUPERAntispyware - Microsoft Safety Scanner...
System Security
My c:\windows folder has a couple of strange files: "D" and "@#"
Without quotes, no extension. Anyone know what they are and if they're legit? Thanks.
General Discussion
"application" can't be run in win32 mode"
I'm trying to run VIPRERESCUE to check for rootkit virus's, but when I dbl click on the application, I get a pop up saying "application can't be run in Win32 mode." I'm using a system that is loaded with the 64 bit version of Win 7 Home Premium. I have run this successfully in the past (don't...
Software
Avast has found "Win32:Tibs-AFH [Trj]" - any advice?
Hi My Avast anti-virus program has detected a Trojan Horse called "Win32:Tibs-AFH ". How do I find out how serious a problem it is? FWIW, it appears to be connected to some email (I am using Outlook2003) - something to do with Condoleeza Rice.... With thanks
System Security
Avast just found this "Win32:Adloader-AC [Trj]"
And calls it a trojan horse. When I try to move it to the chest it says there is not enough space on the disk. What? how can that be? Is there a chest size setting? Im not really sure what to do with this. Should I delete it permanently or put it in the trash? Is it a false positive?
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 17:36.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App