• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

Need Help with Trojan.AdClicker and Trojan.Powelik

Starting Oct 16, 2014 I started getting lots of notices from Norton Security that it had blocked Trojan.AdClicker and Trojan.Powelik. My system bogged down until I couldn't use the internet or email.  My CPU usage was maxing out near 100% on all four CPUs. Going into the Task Master I found lots, like 20 to 30, processes of user dlhost.exe*32 named COM Surrogate. After I killed the COM Surrogate process the system settled down to 1 to 10% CPU. Norton seems to know about the AdClicker and Powelik, but there is at least one more Trojan that it can't block and has its way with my computer until I kill it in the task manager.  Doing a little Goggleing I found a Symantec support page that said to run the Norton Power Eraser and it would clear the Trojan off my computer.  I ran the Power Eraser and did the Full System Scan, three times over the last three days...  I've made sure the Norton Updates where run and up to date before each scan.  And as a bonus when I started the Norton Support page, it did a check of the Norton files and fixed one file the first time.  I've increase the time the Blocked URL stays blocked from the default of 30 minutes to 48 hours. But the COM Surrogates seem to be starting them selves up on the hour, and seem to be using a different URL.  Looking at the Security Log, shows a repeat of the same Trojans and blocked processes to the same URLs.  Is Symantec doing anything about Malware and Virus? Or have they shifted their focus to administering the Support pages and this Forum?  Everything I've seen in the Forum pages says so.  If I can't get a solution from Symantec will I have to format scrub my hard drive and reinstall Windows?

Replies

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hi,

You may have new variants of this: http://www.symantec.com/security_response/writeup.jsp?docid=2014-080408-...

which Symantec either partially detects/removes or not added to the current virus db.

BUT, since Symantec promises all the below, for NS & NSBU you may be eligible to this: https://support.norton.com/sp/en/us/home/current/solutions/v62458994_End...

Protection so good, it's guaranteed.

We’re so confident in our antivirus and malware protection, we guarantee it. We’ll help keep you virus free, or your money back. That’s assurance you can’t get from free software.

Note also: "Virus removal service by a Norton expert and the guarantee are limited to computers (PCs and Macs) only. You may receive a full refund on the actual price paid for the Norton subscription, or if a bundle, the total price of the bundled price paid (including any discounts or refunds received and less any shipping, handling and applicable taxes, except in certain states and countries where shipping, handling and taxes are refundable) and only for the current paid subscription service period for that product or product bundle. Norton Security must be installed and activated on your computer prior to the time it is infected by a virus. Money back guarantee does not apply to any damages incurred as a result of viruses."

Regards,

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I did that, and the "I think I am infected" wants me to ID the infected file...  I don't know which file is harboring the Trojan. There isn't something to let Norton Tech examine my computer to see the Malware in the wild. When I clicked on the Norton Support yesterday it gave me an option for a $99 one virus fix or to sign up for a $19.99 support contract...

How to use the Norton Virus Protection Promise if you think you are infected

  • If running a Full System Scan from your Norton product does not solve the problem, you can use Norton Power Eraser to quickly detect and solve most threats. For more information, read I think I am infected.

    If that does not work, or you need additional assistance, you can contact Norton Support for assistance to remove the threat.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hi,

Well, you may have to visit one free malware removal forum: https://community.norton.com/forums/malware-removal-forum-recommendations

or the expensive way: http://us.norton.com/nortonlive/spyware-virus-removal.jsp

Best of luck.

Regards,

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Have you determined if you are eligible for VPP

Log in to your Norton account and you will see a message that says "You have the Norton Virus Protection Promise".
Starting September 23, 2014, the purchase of certain new Norton Software products will include Virus Protection Promise (VPP)

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

It doesn't look like it.  I got my Norton 360 as part of the Comcast security package.  Which puts me in the second class customer camp.  "No Support for You!".

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hi, Coggie. The free malware forums we recommend will sort your problem out.

They are very good at what they do.

Windows 10 Home X64 Norton Security Premium---Current
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Malwarebytes Premium is great and they also have a free version which is an on demand scanner.  The premium can protect you just like Norton can.  I have a lifetime license which can probably still be found online for purchase, but they went subscription so it won't be found on their official company site.  Super Antispyware is great also.  They have a free version of that too.  I run Norton Security Suite along with Malwarebytes Premium, but sometimes taking the computer back to factory settings is a lot easier and quicker than diagnosing the problem yourself and I especially wouldn't pay someone who's job it is to protect me online even though it is only a free Comcast version.  It may be free to us and included in our monthly services from Comcast, but it is not free to them.

The only thing I can say about Comcast is they update their program.  I remember when Comcast was with Mcafee people complained they were using the same version for years.  I myself haven't used Mcafee in years probably since then.

And Symantec you got to do something about getting on AV Comparatives again.  Your on demand scanner isn't as great as some others that is a known fact so make is better.  

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Malwarebytes Premium is great and they also have a free version which is an on demand scanner.  The premium can protect you just like Norton can.  I have a lifetime license which can probably still be found online for purchase, but they went subscription so it won't be found on their official company site.  Super Antispyware is great also.  They have a free version of that too.  I run Norton Security Suite along with Malwarebytes Premium, but sometimes taking the computer back to factory settings is a lot easier and quicker than diagnosing the problem yourself and I especially wouldn't pay someone who's job it is to protect me online even though it is only a free Comcast version.  It may be free to us and included in our monthly services from Comcast, but it is not free to them.

The only thing I can say about Comcast is they update their program.  I remember when Comcast was with Mcafee people complained they were using the same version for years.  I myself haven't used Mcafee in years probably since then.

And Symantec you got to do something about getting on AV Comparatives again.  Your on demand scanner isn't as great as some others that is a known fact so make is better.  

I do not want to argue but MBAM detects and focuses on other types of threats, it can be a good partner to Norton but cannot replace Norton.

Are you sure that MBAM detects and removes Trojan.AdClicker and Trojan.Powelik??

Regards,

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Where did I say that it did replace Norton?  I use both at the same time.  I have no idea if it detects it or not, but it may find some other malicious programs on his computer even if it doesn't.  It is worth a shot, but they can both protect users from downloading malicious stuff by blocking it.  That is what I meant not that it replaces an antivirus because it doesn't  and they would even tell you that.

Malwarebytes premium has real-time protection like Norton, but Malwarebytes Premium was made to run alongside an antivirus it was never meant to replace it.

Malwarebytes free is only on-demand and it doesn't offer you real-time protection.  

The same goes for Super Antispyware.  Neither of them replace an antivirus no matter which version you have. 

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Where did I say that it did replace Norton?

Hi,

I did not say that you said that, I just commented.

Of course I know that you are using both programs, many people here do the same, and never reported conflicts.

My point is that if Norton struggles with some malware, not only detect but also remove it, and I do not mean PUP's or Adware or unwanted Toolbars, then I'm not sure that MBAM could do it easily, but if it happens it's great news.

My question was if you know for fact that MBAM deals with Trojan.AdClicker and Trojan.Powelik so we could advise users to use MBAM, if infected by these.

Best regards,

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I think it is supposed to remove AdClicker not sure about the other one.  Security companies don't call threats the same thing sometimes.  What's known as something to Symantec may be called something else by Malwarebytes or even other security companies so I don't know.  I am just saying it is worth a shot.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

  I am just saying it is worth a shot.

I second that. 

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Before going with either of these options, I suggest trying a simple Windows System Restore back to a point before the computer was infected, if it has not already been done.  I had the exact same problem as Coggie, on Windows 7 Home Premium 64 bit running Norton Antivirus.  Neither full system scan nor Power Eraser worked, but the safe and easy built-in system restore function did the trick.  I didn't expect it to work, but it did.  I would like to know if worked for anyone else.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hi, crazyvaclev. Normally, we don't recommend using System Restore as it can corrupt Norton. If used Norton Tamper Protection should be disabled, and the re-enabled after the restore.

If it worked for you, then fine. Too often, it can cause problems.

Windows 10 Home X64 Norton Security Premium---Current
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

crazyvaclev. also stated on my forum the same thing, but with extra like wondering if it is all gone is the system clear.

If you don't know your own system is in the clear and any problem fixed, don't give others the instructions as you don't really know it has fully worked by any percentage on your own system.

Quads

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

In my case, the system restore erased the latest Norton updates-naturally--but that was easy enough to remedy and now my av seems to be doing fine.  In fact it is running background tasks right now.  I have heard that people who know a lot more than I do about this stuff do not recommend system restore for malware intrusions, but I gave it a try, and, as I said, it appears to have worked for this particular problem.  However, after only twelve hours or so, I am not ready to claim victory.  If something goes wrong I will re-post. As far as the likelihood of system restore corrupting Norton, maybe the fact that I have the cheapest version is a factor (?) but as commonly as it is recommended by Microsoft support, that seems to me like something Norton might want to address.  Or maybe the problem is, in fact, addressed by the disabling of tamper protection that you mention. In any case, thanks for the reply.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

crazyvaclev. also stated on my forum the same thing, but with extra like wondering if it is all gone is the system clear.

If you don't know your own system is in the clear and any problem fixed, don't give others the instructions as you don't really know it has fully worked by any percentage on your own system.

Quads

I see you've already removed those posts. 

A little bit of knowledge is... well a little bit of knowledge.
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Yes  I did because to claim a solution but then wonder is the system is OK, really means they have no idea what they are doing.

It is abd enough when System restore gets stuck, or stuck in a Boot loop on restart or when the user uses Combofix and Poweliks still won't go.

Quads 

Kudos2 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Also try this if the above cannot solve the problem.

http://www.eset.com/int/download/utilities/detail/family/252/

Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Thank you brathejstie, the Roguekiller seems to have stopped the Powelik.  The Norton Security History is still detecting and stopping out attempts to connect.  But I am given to understand that it is "Normal" for outside attempts to get through the firewall happen all the time.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hi cogie, Trying self fixes and then coming back here again with similar issues, is familiar to most people who have been with this forum for a long time. Thats why they direct you to the right path rather than giving a may-be-a-fix-sometimes solution. Now coming to intrusion being blocked, unless there is an actor behind firewall (ie not on the internet side, but your side ) , these intrusions wont happen to a normal user in majority of cases . .
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I can confirm that Norton, Power Eraser, Malwarebytes, and Spybot are all ineffective against Powelik and AdClicker.  I have them all on my computer and have run them all very recently...still getting pop-ups from Norton saying that it is blocking activity from the trojans.  :(

I've posted in the forum that was recommended earlier, but if anyone here has some new strategies, I'm all ears.  At the moment, this is all at nuisance level, but it's on the line to going over into irritation.  ;)

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hello

The best thing to do is to go to one of the free malware removal sites that was posted earlier. Rather than playing around with programs can make the malware worse. Running more than 1 real time program at a time is not a good idea either. The removalists will know just what programs you should run to get your computer cleaned up. Messing around with other programs will just  make it worse..

Success always occurs in private and failure in full view. Windows 7 Pro 64 bit NS with BackUp 22.15.1.8 Core Firmware 267 I E 11
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

WORK AROUND:

Ok, this worked for me.  Before trying this fix I recommend you turn off your internet access\wifi to slow it down.

This Trojan runs a line of javascript from the registry key. If you remove this key it will only recreate it. I have a work around, since I cannot locate the program that is recreating this.  I located the key by running the latest version of Rogue Killer. It then showed me the path of the registry. I did not delete this through RogueKiller since it will only recreate itself...

The path of the offending virus registry  on my computer was:

HKEY_USERS\S-1-5-21-3307227288-2313220994-4118584292-1000\Software\Classes\CLSID\{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}\localserver32

With this you need to move quickly on this part:

1) Delete\edit the two registries. (a) and (default-which will stay but show no value). 

2) Then quickly move to this folder (parent of local32):

{AB8902B4-09CA-4bb6-B78D-A8F59079A8D5}

Right Click file to change\edit permissions.

Uncheck inherit permissions box.  (May be under advanced button), then remove all users except yourself, give yourself ONLY read and DELETE permissions (you can always add yourself back later). This MUST be done BEFORE the virus recreates the registry.  SO be ready for this. Maybe even practice. Reboot. Log in. Go to Task Man and monitor CPUS. if goes up to 100, repeat this because you did not move fast enough in deleting and changing permissions.

-Megan

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I don't know if this will help I to am dealing with this virus this is what I've done and maybe someone can help me to, well to start off I ran eset. Online scanner for 3 hours it did come up with something bit I closed it before it was done. OK so I still had these dllhost. Com sur. Running I used webroot to block it I then went to my processes and found rundll using a large amount of CPU I then went to webroot and blocked that since then it's been quiet no alerts of of an attack just a pop up saying rundll has been blocked . Now here is my problem since I did that I've tried to play world of Warcraft and when I hiring log on it says I can't and gives a error 2 code. I've looked this up on wow forums briefly and it did point out this rundll. As a type of virus now I haven't gone into it much more cause I'm tired. And going to bed soon but I'm running a full eset scan overnight to see what happens and I'm actually doing this with internet explorer. Which was not allowed before because the virus took over the security settings not a cure but a way to shutit up
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Had to add when I blocked rundll. With webroot and the process tried to start Webroot tried to remove it and had the computer restart and it still came up being blocked and wanted to remove it again so I'm assuming it's still infected and to be truthfully I'm a noob. At this and mad that I couldn't play wow. I did go buy a new laptop so it's no big deal to me as I experiment if I destroy the thing in the process. I've have seen alot of post how to get rid of it but do they know if it worked. I have seen it go for 6 hours and not do anything
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

In Yeah again I also blocked powershell that also comes along with the attacks I've also ran I believe you can use Norton 360 to block all of these processes as well. I do not remember which program actually detected the virus it may have been eset o line scanner but it did not remove it. I'll let you all know tomorrow What I find when I wake up as eset is a 5 hour scan
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Well eset only found a ask toolbar/actually -4cab
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Check Apostolos' earlier post, and register with one of the free malware removal forums we recommend.

Stay with the one expert until your system is clean. Don't try fixing it yourself. It can be tricky to remove.

Windows 10 Home X64 Norton Security Premium---Current
Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Running RogueKiller (see link in earlier post) IN WINDOWS SAFE MODE is what worked for me as of 10/31/14.  

Specific instructions are: (0) reboot in SAFE MODE, (1) scan with RogueKiller, (2) When Tr.Powelik is found in registry,  before deleting it, kill all ComSurrogate32 processes in Task Mgr, then (4) delete Tr.Powelik, and (5) reboot immediately.  Follow the posts on this page:

http://www.adlice.com/poweliks-removal-with-roguekiller/

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

There is another thing working with the Powerlik and AdClicker.  As of 10/16/2014 the Micosoft Updates has been disabled, the last updates from the 16th Failed to install.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Did you try following what Apostolos suggested, ie visit a free malware removal forum?
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I am in the EXACT situation as Coggie. Free Norton via Comcast.  I run with Bitdefender, Spybot, McShield and (don't laugh) Windows Defender, alongside my alleged Norton protection.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

My little contribution, I noticed that while in task manager, if you can't stop all the dllhost.exe processes, try clicking the bar at the bottom where it says, "Show processes from all users" I've found that clicking that bar and THEN stopping the processes, keeps it dead for a good minute or two.

For me, it all started with adobe flash player crashing all the time. It was upon THAT investigation that Nortons started screaming about Powelik and AdClicker.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

This is an interesting piece and it does show how to do some of the registry mining that may be necessary. I HAVE  NOT DONE THIS MYSELF, but it came up during some reading about the issue.

http://www.sophos.com/en-us/support/knowledgebase/121370.aspx

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Please do not fix the issue of malware infection yourself, rather get assistance from a trained malware removalist in the free forums listed at https://community.norton.com/forums/malware-removal-forum-recommendations
regards, CV | There is no ONE TOUCH KEY to security . Be alert and vigilant. . | Always have a Backup Plan!
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hence the words might, may, some, and the comment "I HAVE NOT DONE THIS MYSELF." I think the Sophos description of the problem is just the best I have read. I'm not comfortable using tools meant for Microsoft Software Developers nor should most users. The links to Microsoft from Sophos should discourage most users. It did me, but it also explained how deeply this thing is embedded.

A tool to delete null registry entries??? Not for me, without a new hard disk and my windows DVD standing by for the eventual complete rebuild.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I followed YogaGuy's instructions and powelik seems to be gone. 2 days and nothing in the history. Trojan.gen.2 is now showing up adclicker showed up for one day after I executed powelik but last night only trojan.gen.2 showed up. I'll check tonight when I get home from work.
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I followed YogaGuy's instructions and powelik seems to be gone. 2 days and nothing in the history. Trojan.gen.2 is now showing up adclicker showed up for one day after I executed powelik but last night only trojan.gen.2 showed up. I'll check tonight when I get home from work.
Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

The trojan uses Windows Powershell to propagate itself so while I was working on removing it, I renamed the powershell folder,  %SystemRoot%\system32\WindowsPowerShell\v1.0.  Then I deleted the infected profile and rebooted.  Now I can work on removing all the remnants.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Coggie, I started receiving the Trojan.Powelik Activity around the same time.  It was the same day (after) I downloaded their Data Usage Meter. Prior to this there was an issue with my data getting blown out of the water with over 50G in 2 day used.  I keep getting these blocked messages on Norton also.  I have ran WinDef. and NPE along with the Norton scans.  I am really hesitant on adding more "virus" programs to my computer.  Will Malwarebytes work for this? from reading all the posts in a few forums about Trojan.Powelik it seems there is no real fix. Please elaborate.

Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

jbski:

Coggie, I started receiving the Trojan.Powelik Activity around the same time.  It was the same day (after) I downloaded their Data Usage Meter. Prior to this there was an issue with my data getting blown out of the water with over 50G in 2 day used.  I keep getting these blocked messages on Norton also.  I have ran WinDef. and NPE along with the Norton scans.  I am really hesitant on adding more "virus" programs to my computer.  Will Malwarebytes work for this? from reading all the posts in a few forums about Trojan.Powelik it seems there is no real fix. Please elaborate.

Time to visit one of the free Malware Removal Forums recommended by the Community
https://community.norton.com/forums/malware-removal-forum-recommendations

Please be aware that removing Malware is a potentially hazardous undertaking.  
The trained experts at the free Malware Removal Forums will try their best to clean your system and minimize the risk. 
DIY is not recommended.  

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

I also had the Trojan Powelik, along with everything bad it brings with it. I first noticed Norton blocking it and telling me to reboot my computer. This began happening every hour. The I could not open email attachments within IE 9, using an older computer with Vista. I contacted Norton last evening by chat. I have Norton 360 Premier, purchased through Norton. The technician took control of my computer for over an hour and could not remove it successfully. He called me at home, saying he would have to connect me with a more advanced virus removal specialist. I waited on the phone for an hour, at 2:00 am, hung up and went to bed. I called Norton this morning, and left the speaker phone on for about 90 minutes, while doing other things around the house. I was not going to hang up! Eventually a nice gentleman came on to help me. He said they were inundated with calls over this Trojan. He connected to my computer for 7 hours, and I mean a full 7 hours! I checked back every 30 minutes and could see hundreds of files being deleted. I was a bit worried, but in the end, it appears the Trojan has been removed, my security settings fixed, and I can open my email attachments. The gentleman called my house, and spent another 30 minutes asking if I had questions, and teaching me about setting up a back up folder, and what I needed to do to back up my 8 year old computer. I do not think removal of this Powelik trojan is an easy process, and unless your are exceptionally computer savvy and good with the registry keys, I'd suggest working with a technician. For the 7 hours this technician took fixing my computer, it would have been well worth paying $99, but my Norton product gave me the service for free. I know This is not any help to everyone, but I just wanted to show how long it took Norton to remove this trojan.

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

lah1120:
For the 7 hours this technician took fixing my computer, it would have been well worth paying $99, but my Norton product gave me the service for free. I know This is not any help to everyone, but I just wanted to show how long it took Norton to remove this trojan.

Your experience is a help to everyone.  Noting your positive experience with Norton and the time Norton was willing to spend bodes well for Norton.  
Thank you ~ Welcome to the Community

Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

After conducting further research I found this link.

http://www.symantec.com/security_response/writeup.jsp?docid=2014-111020-0511-99It

It resoved my co-workers problem.

Kudos2 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hahaha

Try this, if a user does not give the OK to remove any item from their computer is is against Federal Law.  Do not remove malware from a system via script if located in America as it's against Federal law due to the fact most users will not be able to understand logs and scripts. :p.

Just an impatient guy when we have 250 -300 systems to deal with and I have managed to give SSR files from a system I broke apart Poweliks and Tracur


Quads

Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Well say what you like about US law, this works and you do agree via an EULA to let the tool remove the malware.

http://www.symantec.com/security_response/writeup.jsp?docid=2014-111020-0511-99

It works, it is simple, it doesn't take 7 hours, and for me a life saver. One other piece of advice after using the removal tool ... completely reset your browser. I think the Trojan messes with the browser security settings inviting new infections. Resetting the browser to initial defaults seemed to plug this hole. 

Kudos1 Stats

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

And thank you Quads for sharing your files with Symantec. I imagine your efforts are largely responsible for Symantec getting around to "consumerizing" a removal tool. No doubt they wouldn't have done this without you.

The tool may not work in every case, frankly I doubt if it will, and the use of an expert is still recommended. But I had photos to edit against a deadline, and waiting in a queue for an overworked, underpaid removal expert was not something I could not live with. I had to do something to get back to work, and the Symantec removal tool did just that.

Thank you. thank you, thank you!

Kudos0

Re: Need Help with Trojan.AdClicker and Trojan.Powelik

Hello Pixbyted
Thanks to you for taking time to post your experience and astute comments.
Welcome to the Community
 

This thread is closed from further comment. Please visit the forum to start a new thread.