I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:
Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.
Be careful! Full path on computer: %LOCAL APPDATA%\WINDOWS MBT ICONS\MBTIVUNINSTALL.EXE
MBTIVUNINSTALL.EXE is a pretty popular virus.
You can get it on your computer while downloading it bundled with some free software.
Sadly, most free downloads do not disclose that other programs will be installed, so you are more likely to get MBTIVUNINSTALL.EXE on your PC without your own knowledge.
After being downloaded, MBTIVUNINSTALL.EXE hijacks your browser and changes search settings.
MBTIVUNINSTALL.EXE also causes an appearance of popup ads and browser redirecting.
MBTIVUNINSTALL.EXE is very annoying and hard to get rid of.
Make a full backup of your PC before starting.
Follow the next steps to make your system clean again:
Removal guide for MBTIVUNINSTALL.EXE:
- Uninstall MBTIVUNINSTALL.EXE using Windows uninstallation applet (use Add/Remove Programs or Uninstall Program or Apps & features).
- Open Task Manager and terminate "MBTIVUNINSTALL.EXE" processes.
- Use Windows search to find and remove "MBTIVUNINSTALL.EXE" files and folders.
- Run services.msc and disable a "MBTIVUNINSTALL.EXE" Windows service.
- Execute taskschd.msc to get rid of "MBTIVUNINSTALL.EXE" scheduled tasks.
- Open regedit.exe and delete MBTIVUNINSTALL.EXE registry keys and values.
- Inspect the properties of your desktop and Start menu shortcuts for MBTIVUNINSTALL.EXE presence and "http://" links.
- Open your browser and disable MBTIVUNINSTALL.EXE plugins. Disable all unknown plugins. Reset the browser settings.
- Clean your Recycle bin and temporary files.
- Restart your computer and check results.
Autostart registry keys:
HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\BTIV\UNINSTALLSTRING: “%LOCAL APPDATA%\WINDOWS MBT ICONS\MBTIVUNINSTALL.EXE”
Related Files:
%LOCAL APPDATA%\MICROSOFT\WINDOWS\HISTORY\HISTORY.IE5\MSHIST012017012720170128\CONTAINER.DAT
%TEMP%\6A298489B7562C9E2C0163A571C4DD81.JSON
%LOCAL APPDATA%\WINDOWS MBT ICONS\MBTIPV32.EXE
%LOCAL APPDATA%\WINDOWS MBT ICONS\MBTIUPV32.EXE
%LOCAL APPDATA%\WINDOWS MBT ICONS\MBTIVUNINSTALL.EXE
File Information MBTIVUNINSTALL.EXE:
Virustotal = 32/53
MD5 = F059E6E24C0E2C724610367082738FFB
File Size: 104576
OriginalFilename: MBTIVuninstall.EXE
FileDescription: MBTIVuninstall MFC ?? ????
InternalName: MBTIVuninstall
FileVersion: 1, 0, 0, 1
LegalCopyright: Copyright (C) 2009