Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Infected with Barowwsoe2save malware

  • Please log in to reply
1 reply to this topic

#1 stoney500


  • Members
  • 12 posts
  • Local time:06:39 PM

Posted 23 February 2014 - 12:51 AM

I have tried to remove the "Barowwsoe2save" malware. I have tried malwarebytes and it did not find it. Spybot found it but it can't remove it. Spybot says it's in my memory which is in use and therefore can't remove it. Spybot then asks if it can run after a reboot and can remove the malware that way but it doesn't. Same notice comes up after a complete system scan saying its in memory and Spybot can't remove the malware. Is this going to be another nightmare? Win 7

Edited by stoney500, 23 February 2014 - 12:55 AM.

BC AdBot (Login to Remove)


#2 noknojon


  • Banned
  • 10,871 posts
  • Gender:Not Telling
  • Local time:11:39 AM

Posted 23 February 2014 - 02:02 AM

Hello stoney -


If the program is not listed in Add/Remove or Programs and Features, and there is no uninstaller in the program's folder, the next place to check is your browser extensions and add-ons/plug-ins.


Note that the infection may also be called Browser2Save or a similar name.

This is an add-on that is installed with another program that has been recently installed.

Make sure that you reset your Browser Home page back to the correct version.


Try the methods above first and then try these removal programs.

Download all tools to desktop to run them and Copy and Paste all logs produced -



First -

Download Security Check by Screen317 from HERE
* Save it to your Desktop.
* Double-click SecurityCheck.exe
* Follow the onscreen instructions inside of the black box.
* A Notepad document should open automatically called checkup.txt; please post the contents of that document.
Note: If any security program requests permission to access the Internet, allow it to do so.



Next -

Please download RKill by Grinler to your desktop to run it

Double click the icon to run it..
A black DOS box will briefly flash and then disappear.
This is normal and indicates the tool ran successfully.

Please post the log back here.


Important: Do not reboot your computer until you complete the next step.



Now: -

Please download AdwCleaner by Xplode and save to your Desktop.

  • NOTE : Please close or save all work, as the computer will be Rebooted
  • Double-click on AdwCleaner.exe to run the tool.
  • Vista/Windows 7/8 users right-click and select Run As Administrator.
  • Click on the Scan button. (only once)
  • AdwCleaner will begin...be patient as the scan may take some time to complete.
  • After the scan has finished, click on the Report button...a logfile (AdwCleaner[R0].txt) will open in Notepad for review. 
  • If you see any which you do not want removed, remove the check mark next to it. 
  • Next: Click on the Clean button (only once) to remove the selected items. 
  • You will receive a message telling you that all programs will be close so that the infections can be removed. 
  • Click on OK, and then OK again to confirm the reboot.
  • When cleaning process is complete a log (AdwCleaner[S0].txt ) of what was removed will be on your desktop. 
  • Please copy and the paste this log in your next post.

    A copy of all logfiles are also saved in the C:\AdwCleaner folder which was created when running the tool.



Next -

Download Malwarebytes' Anti-Malware Free (aka MBAM)

- Note, do not accept the Free Pro Trial Version at this time -
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform quick scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.
* Post the log back here.
Be sure to reboot the computer if required after you post the log.
The latest version of the program now scans archive files which were previously not scanned.


Next -

Please scan your computer with ESET Online Scanner
This is best performed with Internet Explorer as it uses ActiveX
1 Open Internet Explorer and hold down Control and click on This Link to open ESET OnlineScan in a new window.
2 Click the ESET Online Scanner button.
3 Check "YES, I accept the Terms of Use."
4 Click the Start button.
5 Accept any security warnings from your browser.
6 Under scan settings, check "Scan Archives" and "Remove found threats"
7 Click Advanced settings and select the following:
* Scan potentially unwanted applications
* Scan for potentially unsafe applications
* Enable Anti-Stealth technology

8 ESET will then download itself, update install itself, and begin scanning your computer.
9 Please be patient as this will take some time (NOTE: First time scans are always longer).
10 When the scan completes, click List Threats
11 NOTE :Click Export, and save the file to your desktop using a unique name, such as ESETScan. Include the contents of this report in your next reply.
12 NOTE : Click the Back button and then Click the Finish button.
NOTE:Sometimes if ESET finds no infections it will not create a log.
* If you lose the log it can be found at C:\Program Files\ESET\EsetOnlineScanner\log.txt
* If no infections are found then just tell me -



Last -

Please download Temp File Cleaner by Old Timer
* Close ALL running applications as TFC will terminate them before attempting to clean up the temporary files.
* Double-click on the TFC icon.
* Vista / Windows 7 & 8 users Right click on the icon and select Run as Administrator
* When the program opens, click on the Start button. 
* TFC will terminate the Explorer process and all running applications and then begin the process of cleaning out all of your temp folders.
* When done, press OK and reboot your computer to finish the cleanup.

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users