Removing Google/Desktop/Install Malware/Virus

This is something interesting that just showed up on my machine. I somehow ended up with a malicious little thing installed in the AppData/Google/Desktop/Install directory that I simply couldn’t get rid of. I think this was part of MobiGenie which may have been installed as part of Unlocker. When trying to fix another problem I may have downloaded a sinister version with a payload, or the Unlocker program may be loaded with crap, it’s hard to say. Nevertheless, I won’t be downloading that again.

This Google install simply wouldn’t go away. I kept getting alerts but couldn’t get rid of it. I could move the directory and drill down into it, but when I tried to remove it, I got a warning saying I didn’t have the permissions.

There is a simple way to remedy this little problem. If you remember the old days of Windows NT you were a God on your machine. You could do whatever you wanted to any file you wanted. In your File Kingdom, your word was law. Alas, Microsoft has made it so that even when you’re an Administrator you really aren’t in charge. What you need to do is put back the old Take Ownership tab so you can get control of the folder.

1. To do that go to Windows 7: Take Ownership Shortcut and install the "Add Take Ownership" reg file.
2. Next, go to AppData/Google, Right Click and select Take Ownership
3. Delete the folder. I would suggest a Shift Delete or perhaps even a Destroy if you have such a tool

The folder should now disappear.

Run a complete scan of your machine to make sure you have rooted out the problem.

You should also do a manual check of your AppData, ProgramData and Program Files (x86) directories. Make sure there isn’t anything suspicious sitting in there.

If you’ve run into the same Google problem or there is some other App denying you access to a file or folder, this new Take Ownership option should help out.

image

Other articles of interest:

Leave a Reply

Your email address will not be published. Required fields are marked *

Recent Comments
  • Custom Keywords for Custom Functions (1)
    • Sarah: Thank you for this. It helped me understand these better.
  • How To Disable the Quicken Registration Prompt (26)
    • Denise Defoor: I have a Quicken SE Version 6 .. My computer crashed a few weeks ago and I finally got it up and running. Now Quicken is telling me I must registered it. What? I have had this program for 20 years. How can I disable the...
    • Greg: For me, holding the *LEFT* CTL + Shift then clicking Online, One Step Update worked. I originally tried holding the right CTL + Shift, and it didn’t work. I’m using Quicken 2006, so I don’t know if it will work...
    • Joe SR>: My monthly income is deposited into my Credit Union account. I use debit whenever possible. I write checks manually and mail them. I use Quicken 2012 off-line only. I have entered all my money and investment accounts. I...
    • Prtet: Never say never….every time I swear I will never use Quicken again, I discover that there are still no viable alternatives. Amazing that there is no decent personal finance software.
    • Joe D.: Holding CTRL + Shift keys and selecting On Line | One Step Update from the main menu worked for my Quicken 2004. I’m grateful that you wrote a synopsis (“Simply put, …”) just beneath the link to the blog...
    • Susan Long: I bought my quicken disc in the beginning and it came with a registration number. I rang the helpline and they gave me the code to put in and talked me through it. It you downloaded your version then you don’t own it...
  • Parsing Strings in Katalon – Split, Substring and Readlines (4)
    • Anjana: Hey thanks for the response It is quite strange but initializing variable for delimiter and it worked String splitFormat = ‘-‘ WebUI.println(var_CampaignDura tion.toString().split(splitFor mat)[0])...
    • Don Pedro: I’m not really sure what the difference is, but I don’t think the “-“ in the split is the same as the one in the date. String var_CampaignDuration = “05/13/2019-06/07/2019&# 8221; String[] parsedDateRange =...
    • Anjana: Hi, I tried the same thing to split the string, but does not work for me, Could you plz point out whats wrong Variable var_CampaignDuration has value “05/13/2019-06/07/2019&# 8221; String[] parsedDateRange =...
    • Ellen: Thanks for sharing!! I like your contributions to Katalon topics.
  • How to Block games by Title and Tag on Steam (2)
    • Marcus861: I made an acc just to say: Same bro
    • JACK: Thanks, same just wanted to block anime games in my discover
  • Create a new and random UUID for an API call (1)
    • Anonymous: Hi ! I found this blog few weeks ago and it’s really helping me out with my tests! Thanks a lot for the Katalon tips and tricks ! Keep up the good work 🙂
  • Working with Dates and Date Formatting in Katalon Studio (6)
    • Ajoo: Thank you for the details. How do i remove leading “0” from dates. i.e. while formatting i receive 04/21/2019, but i need 4/21/2019. (same applies for date)