Celebrate National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Searching for suggestions - POWELIKS: Malware Hides In Windows Registry keeps coming back

Posted on 2014-11-05
1
Medium Priority
?
433 Views
Last Modified: 2014-11-08
Removed using all malware and virus tools for win7 but no luck.  I have a couple of friends that are saying they have done everything they know of but when they open task manager they see multiple com surrogate files.

Thanks
0
Comment
Question by:cesemj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 31

Accepted Solution

by:
Predrag earned 2000 total points
ID: 40425689
According to some reports RogueKiller and Norton Power eraser can clean this one
Download the RogueKiller executable, run it once. You won’t be able to fix anything but it needs to register itself. Then, reboot in safe mode, run the executable again. After the pre-scan is done, hit scan and wait. Get Task Manager running. After the scan is done, check the boxes for everything that is red or orange under the registry tab. After you’ve check the boxes, marking the items for deletion, use task manager to “end process” on every instance of dllhost.exe and then QUICKLY hit “DELETE” on RogueKiller (dllhost.exe processes will start running again if you wait too long, and you want to hit “DELETE” while none of them are running). Re-boot. You’re done and everything is back to normal.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

What's worse than having your data encrypted by ransomware? Getting attacked by a so-called "wiper," which simply destroys the data and offers you no hope of ever seeing it again.
Will you be ready when the clock on GDPR compliance runs out? Is GDPR even something you need to worry about? Find out more about the upcoming regulation changes and download our comprehensive GDPR checklist today !
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question