Fake Blue Screen of Death - Bogus Driver

Malware was able to install "Sysinternals Bluescreen Screen Saver". This seems to either come with or downloads a version of the bluescreen screensave from sysinternals, although it renames the file, internally it still has that name. It looks to be "rebadged" by the makers of this spyware.

The file is #random_characters#.scr  and stored in folder
c:\windows\system32.

One simple way to remove this is to go to c:| windows| system32 and then sort the folder by date order to identify the file. Then simply remove this file.  Then scan the registry and remove this entry.

Updated On: 11.12.14