i fixed my buddy's machine by using regedit and searching for powerscan,
ther were two entries, deleted them, then went to the powerscan directory
and deleted it (may need to search for it) but it was not all that well
hidden, easy to get rid of, that was before i put spybot S/D on it....



"hugoboss" <meatwork@aspara.fr> wrote in message
news:bnja71$n3s$1@news.tiscali.fr...
> Good info .. I will try everything to get this **** out of my machine!
> I will report the final result ASAP
> Thanx again,
> Hugo
> "discogail" <discodancer@hustle.com> a écrit dans le message de news:
> bnb86j$jjg$1@bob.news.rcn.net...
> > interesting....it's listed in the database......Spybot also-- the latest
> > update-->
> > (Malware
> > ....+ MagicControl.WinMgts ++ DyFuCA.InternetOptimizer ++ BookedSpace ++
> > Look2Me ++ PowerScan ++ MediaUpdateStats ....)
> >
> > It exists here--> C:\Program Files\Power Scan.........& powerscan.exe is
> set
> > to start up in your registry...thanks to these wonderful folks.
> > ... download Spybot - Search & Destroy from
> > http://tomcoyote.org/SPYBOT/index1.php
> >
> > After installing, first press Online, and search for, ("Check for
Updates)
> ,
> > put a check mark at, and install ALL updates.
> >
> > Next, close all Internet Explorer windows, hit 'Check for Problems', and
> > have SpyBot remove/fix all it finds in RED.
> >
> > If no joy..still......Hijackthis--> HijackThis Quick Start:
> > http://www.tomcoyote.org/hjt/ will allow you to kill the running
> process..by
> > scanning...checking off the entry (w/ all other windows
closed).....which
> > looks like -->
> > O4 - HKLM\..\Run: [Power Scan] C:\Program Files\Power Scan\powerscan.exe
> > hitting "Fix Checked"....rebooting.........then you can follow the path
&
> > delete the folder.
> >
> >
> >
> >
> >
> >
>
>