I recently ran a Microsoft Security Essentials security scan and had the following item show up as a severe threat: Trojan:Win32/Powessere.A!reg. MSE would find it & remove it, only to keep re-appearing when I re-scanned, both in “quick scan” & “full scan”. This virus also prevented me from downloading ANYTHING (tried updating software, ie. Java, wouldn’t let me, tried to use AVG & wouldn’t let me download). What a nasty virus! How do I get rid of it completely without coming back?
Trojan:Win32/Powessere.A!reg is a highly dangerous Trojan that can access the compromised PC system through the security holes and malicious websites, spam email attachments or unsafe downloads. Most Trojan viruses can get into a computer without any permission and they may not perform any visible activities after installed, therefore victims are hardly to know their computers have been infected. Fortunately, for this Trojan virus, it can be picked up by Microsoft Security Essentials, but that doesn’t mean you are safe from this malware because even though MSE claims it’s removed, it will come back on the next scan.
Trojan:Win32/Powessere.A!reg injects its own start-up registry entries to Windows registry, so that it can run automatically once your computer boots up. Once inside, it can harass you with endless pop-up or pop-under adverts for goods or services that you probably have little to no interest in. With this virus inside the computer, it enables cyber criminals to take over your PC remotely and use the compromised system for doing cyber crime. In addition, you will find your PC has suddenly become slow to start up when you turn it on. This virus may create 30 or even more instances of dllhost.exe *32 – COM Surrogate, consume 100% of the processor, and all of RAM. Moreover, it may block you from downloading anything from the Internet by giving you tons of fake alerts and errors. Hence, in order to secure the stability and normal operation of an infected PC, it is suggested users remove Trojan:Win32/Powessere.A!reg virus manually from the infected machine as soon as possible.
Slow down your PC speed notably.
Add other dangerous Trojan or Spyware to your system secretly.
Allow the hacker to access your entire system.
Collect all your personal information and transfer to a remote hacker.
Destroy critical system files and make PC unstable.
From malicious drive-by-download scripts from corrupted porn and shareware / freeware websites.
Through spam email attachments, media downloads and social networks.
When clicking suspicious pop-ups or malicious links.
Open unknown email or download media files that contain the activation code of the virus.
Note: No matter how the virus accesses your PC, users should know that there are no tools can remove this pesky Trojan automatically at this moment, it is suggested users not spend much time in downloading or paying any security software which claims can delete this stubborn virus. It is totally useless. To completely get rid of Trojan:Win32/Powessere.A!reg, professional manual guide is needed.
Currently many computer users had the same experience that this virus couldn’t be removed by any anti-virus applications. So the manual approach is always required to combat this virus. And here is the step-by-step removal guide for all computer users.
1. End the malicious process from Task Manager.
Once Trojan:Win32/Powessere.A!reg virus is installed, computer user may notice that CPU usage randomly jumps to 100 percent. At any time Windows always has many running processes. A process is an individual task that the computer runs. In general, the more processes, the more work the computer has to do and the slower it will run. If your system’s CPU spike is constant and remain at a constant 90-95%, users should check from Task Manager and see if there is a suspicious process occupying system resources and then end it immediately.
(The name of the virus process can be random.)
Press Ctrl+Shift+Esc to quickly bring up Task Manager Window：
2. Show hidden files and folders.
Open Folder Options by clicking the Start button, clicking Control Panel, clicking Appearance and Personalization, and then clicking Folder Options.
Click the View tab.
Under Advanced settings, click Show hidden files and folders, uncheck Hide protected operating system files (Recommended) and then click OK.
3. Open Registry entries. Find out the malicious files and entries and then delete all.
Attention: Always be sure to back up your PC before making any changes.
a. Press Windows key + R to open Run box. In the “Open” field, type “regedit” and click the “OK” button.
Then a Registry Editor window will pop up as the following picture shows:
b. Search malicious files and registry entries and then remove all of them:
%AllUsersProfile%\[random]
%AppData%\Roaming\Microsoft\Windows\Templates\[random]
%AllUsersProfile%\Application Data\.exe
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\[random]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Temp
Trojan:Win32/Powessere.A!reg is a dangerous Trojan detected by MSE that can carry out many damaging actions on the corrupted PC. It will target every computer users that range from individual, educational institutions, up to known organizations. This virus poses a huge risk for your computer because it is able to open up firewalls and collect confidential information such as personal financial information. Also it will drop harmful files and make several changes on computer settings so that it is not surprised that your PC is running out of order. It is getting slower and slower or even frozen all the time. This nasty virus can conceal itself and prevent itself from being detected or removed by all kinds of antivirus programs, therefore manual removal is considered to be the best way to eliminate it completely from the infected machine.
Note: If you are not knowledgeable enough to be able to distinguish the location of this virus, or you are afraid of making mistake during the manual removal, please contact experts from Yoocare Online Tech Support for further help.
Published by on December 14, 2014 8:12 am, last updated on December 14, 2014 8:12 am
