Removing Google/Desktop/Install Malware/Virus

This is something interesting that just showed up on my machine. I somehow ended up with a malicious little thing installed in the AppData/Google/Desktop/Install directory that I simply couldn’t get rid of. I think this was part of MobiGenie which may have been installed as part of Unlocker. When trying to fix another problem I may have downloaded a sinister version with a payload, or the Unlocker program may be loaded with crap, it’s hard to say. Nevertheless, I won’t be downloading that again.

This Google install simply wouldn’t go away. I kept getting alerts but couldn’t get rid of it. I could move the directory and drill down into it, but when I tried to remove it, I got a warning saying I didn’t have the permissions.

There is a simple way to remedy this little problem. If you remember the old days of Windows NT you were a God on your machine. You could do whatever you wanted to any file you wanted. In your File Kingdom, your word was law. Alas, Microsoft has made it so that even when you’re an Administrator you really aren’t in charge. What you need to do is put back the old Take Ownership tab so you can get control of the folder.

1. To do that go to Windows 7: Take Ownership Shortcut and install the "Add Take Ownership" reg file.
2. Next, go to AppData/Google, Right Click and select Take Ownership
3. Delete the folder. I would suggest a Shift Delete or perhaps even a Destroy if you have such a tool

The folder should now disappear.

Run a complete scan of your machine to make sure you have rooted out the problem.

You should also do a manual check of your AppData, ProgramData and Program Files (x86) directories. Make sure there isn’t anything suspicious sitting in there.

If you’ve run into the same Google problem or there is some other App denying you access to a file or folder, this new Take Ownership option should help out.

image

Other articles of interest:

Leave a Reply

Your email address will not be published. Required fields are marked *

Recent Comments
  • Output status messages and test information by writing to the Log File Viewer in Katalon Studio (6)
    • Saranya: Good One. Could you plz share link to access all your katalon related blogs. ThankQ
    • Rodrigo Calabretta: I’m using the KeywordUtil.markFailed or KeywordUtil.markError and my test stops is being shown as Error and If I use in the @afterTestCase the testCaseContext.getTestCaseSta tus() to show the status test case...
  • Working with Dates and Date Formatting in Katalon Studio (14)
    • Don Pedro: That could be a little tricky. First, is the text/format always going to be the same? You will need to do some parsing. Separate the first but of text at 2019. After that, split the text again to get rid of Central Standard...
    • Don Pedro: It should be of the same Date type as today. You could then do some calendar trickery with Calendar /*Calendar c = Calendar.getInstance(); //c.set(Calendar.MONTH, 1) //Set the month, 0=January, 11=December println...
    • josh: I’m testing a page with a string like “Updated November 21, 2019 16:25:32 PM Central Standard Time.” How might I capture the date and time and compare it to current time to verify that the update time was within...
    • zakir hussain: today = new Date() lastWeek = (today – 1.week) can u please help me in understanding what is the return type of lastweek? and I wanted to set nextyear date how can i do it
    • ALLAN FORD: Useful !
    • Don Pedro: Not sure I understand what you are trying to do.
    • Don Pedro: formattedDate = mydate.format(“M/dd/yyy& #8221;)
  • Setting up Environment Profiles in Katalon Studio (2)
    • Don Pedro: Not quite sure I understand. The term “Execution Profile” is normally used now, but they are still GlobalVariables and are created in the same way for version 7 as previous. You make a new execution profile, then...
    • Aparna: Hello, Your documentation is excellent and has helped me understand many things. But this article above seems outdated and I need help in creating my own Global variables and all the documentation out there seems to be point to...
  • Here is my drive cluster (2)
    • Don Pedro: While I still have those drives, the drive cluster looks nothing like that now. Almost all of my external drives have had the cases removed and they have been installed into a series of MediaSonic 8 Bay Drive Enclosures. I...
    • Marin Boucher: Hi! Verry funny blog with “go to the point” on many post! I spent good time reading some of your post. Regarding this one about NAS, “many NAS” in fact, I would be curious to see a screenshot of...
  • How To Disable the Quicken Registration Prompt (27)
    • debra: didn’t work for me… my 2007 – which I am keeping on my older mac.
  • Adding entries to an open Excel spreadsheet during runtime (1)
    • IanG: Hi: Seems like nobody else has described (in detail) how Katalon can be configured to test an API by reading the first entry from a multi-row multi column XLSX spreadsheet, executing a test, writing the result to another column (or...