New Malware Warning

There is a new malware /ransomware application out that mimics a hard disk failure. The symptoms are multiple messages regarding “Windows Delayed write failure”. In addition, there will be no files visible on the machine, taskmanager will not work, etc. It is installed on windows XP machines using a newly discovered vulnerability. The link is delivered via email, using a URL shortening service, such as bit.ly. End users should be made aware of the dangers of clicking unknown links, even from colleagues or friends.

Once the malware roots of System Restore virus penetrate inside of user’s computer one of the first things the user would encounter would be this message:

Windows – Delayed Write Failed

Failed to save all the components for the file \System32\[random name]. The file is corrupted or unreadable. This error may be caused by a PC hardware problem.

‘Windows Delayed Write Failed’ may be a false warning message which is a part of some malware infections and ransomware, fraudulent system optimizers or defragmentation tools that involve Data Repair, Data Recovery, System Restore and Data Restore.

Once you click ‘Cancel’ or other buttons offered, suddenly the next fake message titled ‘Windows detected a hard disk problem’ would appear. The options given are to ‘Scan and fix’ or to ‘Cancel and reboot’. Whatever option you select, soon you would face some counterfeit system optimization tools or defragmenters occurring on your screen. They would not ask your permission or agreement for such unauthorized startup once you boot up your PC.

The System Restore is the fake system defragmenter which has done harm to many computers. This is the rogue and malware application requiring immediate removal. So, if you see the message “Windows – Delayed Write Failed” just before System Restore malware first appears in front of you, please contact the CCR Help Desk ASAP. Keep in mind that this is just the technique applied by this hoax to convince you in its alleged legitimacy. Please take all the necessary measures to eliminate this virus as soon as you can.

If you have any questions please don’t hesitate to call CCR – 248.284.7100.