Finding IE 11 somewhat sluggish, I ran the Adwcleaner. It found 6 pup's, but when I clicked on clean, it stalled and I had to use the task manager to stop the process. see attachedAdwCleaner[S16].txtfiles.
Some malware tries to actively prevent cleaners and scanners from working. To stop these malware processes use RKill then, without restarting, run your scanner again.
https://www.bleepingcomputer.com/download/rkill/RKill is a program that was developed at BleepingComputer.com that attempts to terminate known malware processes so that your normal security software can then run and clean your computer of infections.
It could have been your AV that flagged it as a trojan, or it could have been the malware attempting to protect itself. Bleeping Computer has always had legitimate software without any surprise bundled software aside from what you are d/l ing.
You have the option of choosing another file that is not listed as an .exe or named RKill, you may wish to try d/l ing one of those & see if you can run it.
- RKill.com Download Link
- RKill.scr Download Link
- eXplorer.exe Download Link - This renamed copy may trigger an alert from MBAM. It can be ignored and is safe.
- iExplore.exe Download Link
- uSeRiNiT.exe Download Link
- WiNlOgOn.exe Download Link
Hi Borg, thank you for the help. Being I.T. challenged, Here is what I did, after trying each link, I got the notice that the time to the link had expired. I then tried again the RKILL, but after the download I did save it first. Then I did open it and installed it. After the run see attachment, I ran the Zone Alarm AV and that one came up clean. Then I ran the ADW cleaner again and it came up with three of the PUP's, but this time ADWcleaner did get rid of them. AdwCleaner[S19].txt Rkill.txt
Glad you got it sorted.
Some viruses have programming to disallow any cleaner to run, thus protecting themselves. In that instance you have to run the program under a different name so it will be allowed by the virus. Something that isn't on the internal list to disallow. Hence the reason they are offered in different names & extensions.
Quote
