8 replies to this topic

[Frustrated_1110]

I have a win 7 pc with the poweliks virus. There are dllhost processes spawning repeatedly and clogging up the system.

I have run Norton 360 several times. Norton says it has removed the virus but the problem persists.

Norton forums recommend you for assistance.  Thanks in advance for any help.

[ken545]

 

Run this tool and post the log when done

 

Please download ESET Poweliks Cleaner  to your desktop

 

Right Click  Poweliks and select Run As Administrator

Read the terms of the End-user license agreement and click Agree if you agree to them.

The tool will run automatically. If the cleaner finds a Poweliks infection, press the Y key on your keyboard to remove it.

If Poweliks was detected "Win32/Poweliks was successfully removed from your system" will be displayed. Press any key to exit the tool and reboot your PC.

The tool will produce a log in the same directory the tool was run from.

Please copy and paste the log in your next reply

[Frustrated_1110]

Have attempted to download requested tool ...  ESET Poweliks Cleaner .  File downloads to desktop but is not executable.  I have changed the Internet options to attempt a fix but no love. 

 

Any suggestions?

[ken545]

I just double checked the link, downloaded it to my desktop and its an exe file, ,right clicked on and ran as administrator and it ran just fine.  Drag it to the trash and try a different browser, if still no luck you may have to use another computer to download it and then transfer by usb flash drive to this infected one

[ken545]

Try a different download link

 

http://www.eset.com/...52/#offline,140

[ken545]

There are other methods to remove this pest but ESET appears to be the best but if still no joy with the new link than run these scans and post the logs please

 

Please download aswMBR to your desktop.

 

• Double click the aswMBR icon to run it.

Click the Scan button to start scan.

If you are asked to update the Avast Virus database please allow it to do so.

When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

 

I just want to see the report....Please Do Not Fix Anything

 

============================================================================

 

 

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

How to determine whether a computer is running a 32-bit version or 64-bit version of the Windows operating system

A simple way to check your system: Start --> Computer (right click) --> Properties

 

 

 

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.

Please make sure All Users is checked

Just keep the defaults as in the picture checkmarked

Press Scan button.

It will produce a log called FRST.txt in the same directory the tool is run from.

Please copy and paste log back here.

The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[ken545]

I would still like to see the logs for FRST to see if anything else needs to be removed.  In the malware community things change on a dime, new threats and also new tools to remove them, the thing to do now is to download, install and run Malwarebytes Anti Rootkit, its doing a fine job of removing Poweliks

 

http://www.malwareby...rg/antirootkit/

 

 

 

Please download Malwarebytes Anti-Rootkit from Here

Unzip the contents to a folder in a convenient location.

Open the folder where the contents were unzipped and run mbar.exe

Follow the instructions in the wizard to update and allow the program to scan your computer for threats.

Click on the Cleanup button to remove any threats and reboot if prompted to do so.

Wait while the system shuts down and the cleanup process is performed.

Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.

When done, please post the two logs produced they will be in the MBAR folder... mbar-log.txt and system-log.txt

[ken545]

Still with me ?

[ken545]

Due to inactivity this topic will be closed.
If you need help please start a new thread.

New members follow the instructions here http://forums.whatth...ed_t106388.html and start a new topic