Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Help With This Strange "program win32/hadsruda!bit" MSE Defection

22 Mar 2016   #1

Windows 7/10 64 Bit
Help With This Strange "program win32/hadsruda!bit" MSE Defection

I help some friends folks out with minor computer troubleshooting but when a friends dad brought me his laptop (Acer 5580) he said he kept getting the detection from MSE about a "program win32/hadsruda!bit"

I have never seen this virus/error and whatever I search it seems to go to some post about removing toolbars and using something called spykiller or something. It looks like more of a advertisement then anything.

He did give me info regarding what he could remember DL'in and i knew he been doing torrents ha ha but from what I gathered it could be related to a activate crack of office or windows (which he is already has real copies of) but for some reason MSE fails removing it, Malwarebytes can't find and can't find any info about it.

Is this a false negative or what ha ha

My System SpecsSystem Spec
22 Mar 2016   #2

Windows 7/10 64 Bit

All sorted. ran MSE in safe mode and this time it actually got it.
My System SpecsSystem Spec
22 Mar 2016   #3

Microsoft Community Contributor Award Recipient

Win 10 Pro x64

False negative? I think you mean false positive. No it's not.

Here's a Microsoft page for that file,!bit

That other one is for hacking activation, you need to get rid of that too.

That's what can happen when you try to get something free, you're lucky if that's all you got.
My System SpecsSystem Spec


 Help With This Strange "program win32/hadsruda!bit" MSE Defection

Thread Tools

Similar help and support threads
Thread Forum
"Behaviour:Win32/Powessere.D" virus problem
Hi,All out there,I'm really hoping that someone can help me with my problem-I've somehow picked up the 'Behaviour:Win32/Powessere.D' virus,and despite running many different anti-virus programs,it always comes back.This is classed as a 'severe' risk,so I dare not use my laptop for anything...
System Security
Security Essentials can't remove/quarantine "Adware:Win32/FastSaveApp"
Hi there Each time I switch on my PC Security Essentials flags up an medium alert (status active) concerning a detected item - "Adware:Win32/FastSaveApp". I've applied the action "Quarantine" and "Remove", each time Security Essentials completes the operation and tells me to restart my PC. ...
System Security
How can I be sure if I am still infected with "Win32/Small.CA" virus".
Hi I got a "Solve PC Issues" (white flag) saying "Remove the Win32/Small.CA virus". I am running MSE (Microsoft Security Essentials) on Windows 7 Pro (x64). So I did an update followed by a full scan using MSE. I then ran - Malware Anti-Virus - SUPERAntispyware - Microsoft Safety Scanner...
System Security
My c:\windows folder has a couple of strange files: "D" and "@#"
Without quotes, no extension. Anyone know what they are and if they're legit? Thanks.
General Discussion
"application" can't be run in win32 mode"
I'm trying to run VIPRERESCUE to check for rootkit virus's, but when I dbl click on the application, I get a pop up saying "application can't be run in Win32 mode." I'm using a system that is loaded with the 64 bit version of Win 7 Home Premium. I have run this successfully in the past (don't...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 20:24.
Twitter Facebook Google+