Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm assuming this is a virus, though my virus checker can't find it.

I downloaded the latest VMware Workstation 7 installer. I'm running Windows 7 64bit.

I go to install it, and the installer window is a Disney website.

Upon further investigation, what's happening is that the VMware installer extracts/writes a bunch of files to a temp directory. One of those files is an index.htm file. When I open it, sure enough it's the Disney file.

I used Sysinternals Process Monitor to look for anything fishy, but the only thing I see touching that index.htm file is the VMware installer and explorer.exe

share|improve this question
Did you compare the MD5 or SHA1 checksums with those provided on VMware's download pages? Do they match? – Mike Fitzpatrick May 7 '10 at 13:21
And where did you download it from? – Peter M May 7 '10 at 13:44
up vote 4 down vote accepted

Forgot to answer this. It was, in fact, a bug in vmware's installer. The disney index.html file was in my "downloads" directory due to my kid dragging/dropping/saving.

When the vwware installer -- which was in the same directory -- executes, it unpacks its own index.html file into the directory... unless that file already exists. So since there was an unrelated index.html file in there, it did not overwrite it with its own; however, it loaded that index.html file, which caused this behavior.

I reported this bug to vmware, they confirmed, and it's since been fixed.

Bottom line: this was not a virus.

share|improve this answer

I know you said you have checked this for viruses, but what software did you use to check for viruses? The following are tools that I would use to try to clean the computer:

If you need more help, please let me know!

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.