Uninstallable Virus? BrowserDefender.exe

[itsjustalogin]

Hello everyone, after just waking up after about an hour sleep, I decide to get on my desktop. When I do I have to force restart it because it just decided to stop loading during startup. It reloads just fine with the exception of the 'start windows normally' screen from me needing to force restart it. After it loads and I get logged in I notice in my task manager a new program that's running in the background that I have never installed called 'BrowserDefender.exe'. I looked around on the web for what this is but I have found very little. I went to my control panel and uninstalled it from there, once that was done and said it was "successfully removed" it was still in the directory of it's install path (C:\ProgramData\BrowserDefender\2.6.1339.144\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\). I tried to delete the folder just to get rid of whatever this is but it replied with the error message that it's in use in another program. Not finding any programs with the file contents name's I tried to manually delete a single file. Doing so replied that the file was in use in Steam (Valve software). Knowing well enough that it's not supposed to be I exited Steam and closed all of its processes and tried to delete the file again. Doing this said that the exact same file was in use in my Razer mouse configuration software, again I stopped that process and tried again and got the same result but with a different program each time. I'm guessing that it's hooking/injecting all the files in its installation folder onto every process that my computer runs? I've scanned the folder with MalwareBytes and BitDefender both finding no threat. Is there any way I can stop this program from attaching itself to all of my other programs and be able to successfully delete it?

 

[gied]

Try Adwcleaner or Junkware removal tool. RevoUninstaller might help to remove it as well. Malwarebytes has a function to delete such hard to remove files as well under utilities.

 

[cottonball]

itsjustalogin,

Can you do the following from the Desktop..

:info: Please download the Farbar Recovery Scan Tool
Select the 64-bit version.


Save it to the Desktop.

• Double-click the downloaded file to run it.
• When the tool opens click Yes to disclaimer.
• Press the Scan button.
• FRST64 makes a log (FRST.txt) in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply. <<---



The first time the tool is run, it also makes another log: Addition.txt
Also post the Addition.txt in your reply. <<---


If not, post back, and we will take another approach.

 

[itsjustalogin]

Thanks for both of your replies. I used AdwCleaner and it seemed to do the trick, I don't know if it's necessary or not now but I can post the logs from that if needed.

 

[cottonball]

itsjustalogin,

BrowserDefender may come along with other undesirables.

To be on the safe side, would run the Farbar Recovery Scan Tool and post its results, to see if 'anything' else is in the system.

...just a suggestion...