notepad.exe.exe - Dangerous
%windir%\notepad.exe.exe
Jeff's Story:
My PC had gotten a bad rootkit that my ISP antivirus software (powered by McAfee) could not detect, nor could fix.
I sought a solution on the Internet and discovered your product and tried out the trial.
You quickly found the rootkit and SAVED my PC!
I haven't had any problems since, and I'm extremely grateful.
Manual removal instructions:
notepad.exe.exe tries to terminate antiviral programs installed on a user computer.
Related files:
%Windir%\system\svchost.exe
%System%\ERSvc.exe
%Windir%\mmsg\mcAfee.Update.exe.exe
%Windir%\mmsg\mmsg.exe.exe
%Windir%\Config\Easy.Windows.Monitoring.exe.exe
%Windir%\Config\system.update.exe.exe
%Windir%\notepad.exe.exe
Adds the value:
"notepad" = "%Windir%\notepad.exe.exe"
"mmsg" = "%Windir%\mmsg\mmsg.exe.exe"
"system.update" = "%Windir%\Config\system.update.exe.exe"
"mcAfee.Instan.Update" = "%Windir%\mmsg\mcAfee.Update.exe.exe"
"Easy.Windows.Monitor" = "%Windir%\Config\Easy.Windows.Monitoring.exe.exe"
"ImagePath" = "%System%\ERSvc.exe"
to the Windows startup registry keys.
Removal:
Kill the process notepad.exe.exe and remove notepad.exe.exe from Windows startup.