Jump to content

infected need help


Recommended Posts

Hi Kevin - me too, since Saturday.  Fffsee.com continuously, "powershell not working", and finally system freezes and CHKDSK scans on reboot.  However, I don't want to hijack Tybeau's thread and confuse the issue further.  Should I start a new forum question and post my log entries there?

 

Please advise - I work from home and I can't lose my system, I provide my own equipment and cannot afford new

Link to post
Share on other sites

Tybeau go to "tools", then "Internet options" then "restore to default level" and rest your security to default level - I got mine to work enough to download Farbar and latest version of Roguekiller from bleepingcomputer.com.  Some versions of Poweliks are able to be removed with the latest version of Roguekiller

Link to post
Share on other sites

Kevin,

 

I had already read another thread and already added "PUP' and "PUM" to the scan, as well as checked the RootKit box, as well as I was able to download the Microsoft removal tool kit yesterday (because it wasn't until today it started blocking downloads.)  Neither produced anything.

 

However,  RogueKiller 10.2 just found Poweliks on mine, on my registry - I'm attaching screen shot to show you what it looks like - SEE THE KEY IN RED.

 

Otherwise, I'll let Kevin do his thing and follow along quietly in case RogueKiller doesn't get it all.

 

Good luck, Tybeau, and thanks Kevin!

post-175848-0-38974500-1413843975_thumb.

Link to post
Share on other sites

UPDATE:  I did a cleanup afterward with CC cleaner and everything appeared okay for a bit, but Poweliks came back, found again by RogueKiller a second time. 

 

There are other host/cohost programs associated with it that allow re-entry, and thus the other sites that Kevin has suggested, done in the order he recommends, and those need to be cleaned/fixed/removed as well or it will come right back. 

 

Sorry I jumped ahead, Kevin :(

Link to post
Share on other sites

  • 1 month later...
  • Root Admin

We're sorry. It looks like your topic was somehow overlooked. Due to the length of time we'll go ahead and close this topic now but if you still actually need help please send a private message to one of the Moderators and we'll assist you.

Thank you and sorry we missed your topic.

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.