Hello everyone, I have a problem for the last 3 days. I tried many things, but the problem still exist. There is a pop-up appeering when I have connection to internet. My operational system is in spanish and it appears as "operacion de archivos" (file operation I suppose). It says Windows wants your permission to continue. I think it wants to download something, when I close it it appears again. When the computer is on for more than 3-4 hours the background is becoming black and I have to restart the computer to go back to the old one. I have Avira Antivirus, when i scan the system didn't appear anything. I used the Then I downloaded 30 days free Kaspersky Pure and also Kasperski removal tool. They both detected around 6-7 viruses that were kz1.exe , kcagua.exe, kz0.exe, and kzz.exe (the others were the same but repeated and in different locations in my computer). I started the Windows Defender, it showed me that the following program PowerRegScheduler may be harmfull and it is recommanded to put it in quarantine. I did this and my restarted the computer. When it started I didn't have connection to internet(WiFi). At least the "File Operation" didn't appeared but it was because I didn't have connection to internet. I went to my university and Googled the PowerRegScheduler, I found many complaints that it could be a virus that wants to download different viruses, which explains why the Operacion de archivos(Fiile Operation) appears. I found in a forum that the SUPERAniSpyware is useful for this virus and there were many comments that it really works. I cheked in Google if it really works, or it is a fake antivirs removal. I didn't find bad comments, so I downloaded the program in my memory stick and brought it to my computer, I installed it and scanned my computer. It found 1 Trojan and many coockies things that it said are harmful, then it deleted everything. I still didn't have connection, I read that it could be because of Kasperski Pure, so I uninstalled it and tried to install again Avira Antivir. As I didn't have connection, I couldn't do it. I tried to use a cable instead of the wireless, and I did have connection. Unfortunatelly the "operacion de archivos"(file operation) appeared again. I really don't know what to do....can someone help me?
P.S. Actually the full name that appears in Windows defender is Program:Win/PowerRegScheduler . When I put it in quarantine, nothing change. The Defender says that everything is ok, but when restart the pop-up appears again.
Edited by nazko, 30 January 2011 - 06:19 PM.