Romove "this program contained a virus and was deleted" Virus

Description of "this program contained a virus and was deleted" Virus

"this program contained a virus and was deleted" virus was founded in the IE browser. When users try to download something, like movie or a PDF or other documents, all those downloads are reported "this program contained a virus and was deleted" and then was deteted. However, when they run Malwarebytes or other antivirus to try to scan, nothing weird was detected, but the problem is still there. Why?

"this program contained a virus and was deleted" virus is a tricky virus that can hook deeply into  your system and then infect your IE browser. Here some victims may have two questions: First, why does antivirus could not detect it?  Second, why does it delete all the things I download?  For the first question, our answer is that, as we stated before, this virus can hook up deeply into system and may bundled with other system files, making antivirus failed to detect it. For the second question, the answer is that this is a self-protective mechanism which means it delete all the downloads so that you cannot download any antivirus to remove it.


But what is its purpose? When this virus is bundled with other viruses, it will show its devastating power. One of its main purposes is to stop you from downloading anything. Besides, malicious code is embedded with this virus to incur other Trojan, browser hijacker, or eansomware. Imagine how terrible it is when your computer is infected with Trojan horse but you cannot download anything to remove it. When you computer is infected with "this program contained a virus and was deleted" virus, do not attempt to remove it through antivirus, because you can download neither it nor antivirus can found it. At this moment, manual approach would be the best way and that’s why we post this text.

Manual approach to remove "this program contained a virus and was deleted" virus

Step 1: Show all the hidden files.
Click Start>>Control Panel>>Appearance and personalization>>Folder Option>>tab “View”.

Under the tab “View”, choose “Show hidden files, folders and drives”.

Step 2: Open the Task Manager and then end related process.
Hit Ctr+Alt+Del to enter the Task Manager and find Random.exe and end it.

Step 3: Go to( C:)>Program File>Windows Defender.
Change the file named “Windows Defender” into any name you like.

Step 4: Open the registry editor and remove then all.
Hit Win + R and then type “regedit” to enter the registry editor.

Find following registry entries and remove them all:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ‘Random’
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Random
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “CertificateRevocation” =Random

Find the following files and delete them all:
%AllUsersProfile%\random.exe
%AppData%\Roaming\Microsoft\Windows\Templates\random.exe
%Temp%\random.exe
%AllUsersProfile%\Application Data\.dll HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Random “.exe”

Manual removal approach comes with risk if you are not so familiar with registry. For any problem or question you have when you deal with this virus, please feel free to contact 24/7 Online Tech Support.