Remove PUP application from DVD Drive (F:) CDROM

myrnsterMash · 15 Aug 2016

Okay guys, this is where the training wheels come off, because I am getting on my own nerves, but since "reimage" shows:

Remove PUP application from DVD Drive (F:) CDROM-pc-scan-reg.gif

the Security Threats are good.
I know what to do next, and want to thank you for Everything, including your patience. You are awesome in what you do, and do not make people feel stupid for being less knowledgeable (i.e. stupid

) as what is common sense to you. I can not give back the time spent on helping me, but it is not without appreciation! If you ever need a mechanic for advice or a how-to for good ol' American cars you know where to find me. Hey, my love of muscle cars carried a 9/16 and 1/2 in. wrench in my purse at all times, lol. I know things...........

Sincerest thanks,
myrnsterMash

Slartybart · 15 Aug 2016

Hold on .... don't hit that button

I just looked at the reimage page and it seems to be one of those fluff programs. Scan, scare, sell

I hope you didn't pony up any money - I always suggest FREE software unless only a paid license will work (and I'm up front about the cost)

anything those programs say they can do for a price - you can do for free. More importantly, you know what you did.

If you already hit the button - do NOT go any further with ReImage.

If you paid for it, I'd take them up on their money back guarantee.

Once you get your money back (if you paid anything for it)
Uninstall it

Slartybart · 15 Aug 2016

Pick up from where you left off with Mbam: Post# 37

simrick · 15 Aug 2016

Oh dear, I'm not sure how you got that Reimage, but that's not something we want on your system. I hope Slartybart's posts were soon enough to get you out of that program. I looked at the Bleeping Computer link and I don't see any ads there for Reinage, even though I am not logged into the site, so I'm not sure what happened.

Slartybart · 16 Aug 2016

simrick said:

Oh dear, I'm not sure how you got that Reimage, but that's not something we want on your system. I hope Slartybart's posts were soon enough to get you out of that program. I looked at the Bleeping Computer link and I don't see any ads there for Reimage, even though I am not logged into the site, so I'm not sure what happened.

ReImage came from an ad on my link to SevenForums tutorial for TDSSkiller - myrnsterMash an I exchanged a few PMs and thankfully she was smart enough to only run only a scan - never pressed the repair button - phewwwww!

I also asked her to uninstall ReImage, will do.

I have a question for you simrick.

The Bleeping guide instructs the user to run the ESET single purpose cleaner and a few other on demand scans.
I deferred to your judgement but said at a minimum the ESET Poweliks cleaner should be run
I know what you're going to say, but since I already opened the can... Do you want myrnsterMash to run everything in the guide.

I'm fairly certain that myrnsterMash is already doing the recommendations and will post the logs when done.
She was a bit miffed by the click bait ReImage advert and understandably so. I told her to take a break, visit some friends, don't let this issue consume all of her time. Sooooo it might be a while before we know she hasn't fallen off the face of the earth

simrick · 16 Aug 2016

Slartybart said:

ReImage came from an ad on my link to SevenForums tutorial for TDSSkiller - myrnsterMash an I exchanged a few PMs and thankfully she was smart enough to only run only a scan - never pressed the repair button - phewwwww!

I also asked her to uninstall ReImage, will do.

Ah - okay. You got her sorted, so thanks for that.

I'm sorry - I had a bad situation yesterday and was not here much. Trying to clean someone's infected flash drives+computer; turned out, before I realized what I was dealing with, the worms traveled through my network and infected two of my computers before I could completely neutralize it.

So, I've got 2 systems here which require an image restore; one is done and one is waiting for me. Learned my lesson. Next time all other systems will be shutdown, and the guest wifi will be used...I just wasn't expecting the severity I found.

Slartybart said:

I have a question for you simrick.

The Bleeping guide instructs the user to run the ESET single purpose cleaner and a few other on demand scans.
I deferred to your judgement but said at a minimum the ESET Poweliks cleaner should be run
I know what you're going to say, but since I already opened the can... Do you want myrnsterMash to run everything in the guide.

I'm fairly certain that myrnsterMash is already doing the recommendations and will post the logs when done.
She was a bit miffed by the click bait ReImage advert and understandably so. I told her to take a break, visit some friends, don't let this issue consume all of her time. Sooooo it might be a while before we know she hasn't fallen off the face of the earth

I think she only needs to run the RKILL+ESET Poweliks remover tool (in that order). Chances are good that ESET will find nothing, but we need to be sure. Step #12 is the end - everything after that is for people who get an error that the ESET tool was unsuccessful.

Thanks!

p.s. I think ESET Online Scanner was stalling/having problems, so it may or may not work now, with Poweliks removed. They just recently updated everything on their scan site, and I've had 3 computers with similar issues with scanning, so I can't tell if it's their update or not.

Slartybart · 16 Aug 2016

simrick,

Sorry to hear you have worms

Focus on what you're battling - myrnsterMash and I will proceed with the plan (thanks for clarifying the bleeping guide)

We'll see if the ESET standalone exhibits any hangs - I don't expect it to - unlike the online scanner, it's a single purpose tool.

See ya when you get your machines all shiny again.

Bill
.

simrick · 16 Aug 2016

Slartybart said:

simrick,

Sorry to hear you have worms

myrnsterMash · 18 Aug 2016

[QUOTE=Slartybart - Wed, 17 Aug 2016 18:56:50 -0600]Take a breathe ....

I'm just about to step out,

How to remove the Poweliks Trojan (Removal Guide)

Start with Rkill, skip the 2nd verification with eset online, do Hitman pro

If you post on the thread, simrick can also help.

.

myrnsterMash - Wed, 17 Aug 2016 18:03:28 -0600 said:

Now, I cry, literally crying out of frustration! This is the fourth message I am attempting to submit. It is my fault, I suppose, but having to do the same thing over and over is really getting to me at this point. Where are the options to choose what you want ESET to run? Advanced settings only ask to detect PUPS and/or whether to delete them.
It just will not finish after detecting 8 threats, and is when it blacks out those lines I showed you previously. I even tried running it in a different browser. Avast is telling me the uninstall of Reimage left two files, and wants $$ to remove them. That will not happen forcing me to go to the MS site and search for a current resolution of incomplete uninstalls.

Here I am posting on the original thread, and simrick if you are still with me I value your input. Slartybart thinks very highly of you, and I trust I will get to the mf'n (excuse the reference) bottom of this.

So, I clicked on the first link shown above, and I get a HUGE red flag from Avast stating it blocked a known infected site. So, I googled RKill from BleepingComputer, and got this url:
http://www.bleepingcomputer.com/download/rkill/
There are 3 other options, but only one is from BleepingComputer, so to avoid the Reimage debacle, is this the correct download?

Slartybart · 18 Aug 2016

Myrna sent me a PM and said that ESET hung again when she followed the bleeping guide (similar to post# 32 I guess)

I recommended that Myrna post here on the thread so that other members can help when I'm not available (like tonight when I had a prior engagement)

I posted this recap to bring the thread up to date. Myrna will have to confirm what I posted is the correct status and provide logs of what has run so far.

Here's my reply:

How to remove the Poweliks Trojan (Removal Guide)

Start with Rkill, skip the 2nd verification with eset online, do Hitman pro

I didn't include running Secunia PSI because I think Dism and SFC would perform the same function.

Right click the Windows icon

(aka Start button) on the Taskbar

Select Command Prompt (Admin)
Enter the following lines in the Command Prompt window:

Dism /Online /Cleanup-Image /RestoreHealth

SFC /ScanNow

If there are any errors on the screen after the commands run,

Navigate to C:\Windows\Logs
Right click the CBS folder

Select Send to > Compressed (zip) folder
answer yes to place on Desktop

Attach the zip folder to your next post

Full tutorials:

Run DISM in Command Prompt
Run SFC /ScanNOW in Command Prompt