Solved

Searching for suggestions - POWELIKS: Malware Hides In Windows Registry keeps coming back

Posted on 2014-11-05
1
412 Views
Last Modified: 2014-11-08
Removed using all malware and virus tools for win7 but no luck.  I have a couple of friends that are saying they have done everything they know of but when they open task manager they see multiple com surrogate files.

Thanks
0
Comment
Question by:cesemj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 29

Accepted Solution

by:
Predrag Jovic earned 500 total points
ID: 40425689
According to some reports RogueKiller and Norton Power eraser can clean this one
Download the RogueKiller executable, run it once. You won’t be able to fix anything but it needs to register itself. Then, reboot in safe mode, run the executable again. After the pre-scan is done, hit scan and wait. Get Task Manager running. After the scan is done, check the boxes for everything that is red or orange under the registry tab. After you’ve check the boxes, marking the items for deletion, use task manager to “end process” on every instance of dllhost.exe and then QUICKLY hit “DELETE” on RogueKiller (dllhost.exe processes will start running again if you wait too long, and you want to hit “DELETE” while none of them are running). Re-boot. You’re done and everything is back to normal.
0

Featured Post

Create Professional Looking Email Signatures

Create "Professional HTML Email Signatures" with ease.
7 Day Money Back Guarantee if not 100% Satisfied.
Affordable - Try it out for 7 Days Totally Risk Free.
Installers provided for over 45 Email clients.
Both Windows & MAC Supported.
Highly Recommended!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Do you know what to look for when considering cloud computing? Should you hire someone or try to do it yourself? I'll be covering these questions and looking at the best options for you and your business.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question