KB3035583

Revision as of 10:17, 11 June 2015 by Admin (Talk | contribs)

Get Windows 10
- PUP malware from Microsoft The Microsoft Get Windows 10 Update Notification Scam

An icon appears in the Windows icon tray with a nagging notification "Get Windows 10" which is actually part of an application that appeared in late April 2015 as a recommended Windows update (KB3035583). Microsoft abused their security update system to push an advertisement popup onto their customer computer systems.

KB3035583 loads an executable (GWX.exe) TSR that loads with Windows and uses system memory. It behaves like malware. KB3035583 is classified as a malware PUP. This is similar in behavior in some respects to a virus.

You can remove KB3035583, however, it will likely install again if you use automatic updates from Microsoft. You need to uninstall the update, then go into Windows Update and hide the update from appearing on the list.

removal instructions

  1. Windows Key + R , type "wuapp.exe" and press enter.
  2. In the bottom left of Windows Update dialog box is a link labeled "Installed Updates." Click.
  3. It may take a moment to load the list. This is a large list showing many updates listed by name, all having very similar names. You can sort them by name to help locate the one we are looking for. Locate: "Update for Microsoft Windows (KB3035583)". If sorted by name, you will find it near the bottom.
  4. Right-click on "Update for Microsoft Windows (KB3035583)" and choose "Uninstall."
  5. After completed you will be prompted to restart your computer. Choose "Restart Now." Be patient during the reboot process. Windows will delay loading to do "Preparing to configure Windows."
  6. After Windows has loaded, we need to go back to Windows Update. Windows Key + R , type "wuapp.exe" and press enter.
  7. We need to locate KB3035583 and tell it to hide the update. However, the KB3035583 may not be visible now.
Last modified on 11 June 2015, at 10:17