Not sure when I was infected, but I first began noticing symptoms yesterday. I noticed a slowdown of my computer's speed. Like many recent posters, I saw Task Manager showing multiple instances of the COM Surrogate process that I was able to end with improvement in computer speed, but they would quickly pop back up again.
I downloaded two e-mail attachments (Word documents) from an website e-mail client, but when I tried to download another e-mail attachment later, I got a message saying that my security settings prevented the download of the attachment. I did not change any security settings. I tried downloading FRST per the instructions here but was unable, due to the security settings. I have not yet tried to manually change the IE security settings but could do that if that is the appropriate next step. I suspected those two Word files as the sources of infection. However, they came up clean on virustotal.com. I have also tried the ESET online scanner, but the popup scanner failed to load.
I also ran an Avast antivirus quickscan that detected and repaired two infections. After those repairs happened, I began noticing repeat messages saying that powershell is not working and asking to close it.
I downloaded two e-mail attachments (Word documents) from an website e-mail client, but when I tried to download another e-mail attachment later, I got a message saying that my security settings prevented the download of the attachment. I did not change any security settings. I tried downloading FRST per the instructions here but was unable, due to the security settings. I have not yet tried to manually change the IE security settings but could do that if that is the appropriate next step. I suspected those two Word files as the sources of infection. However, they came up clean on virustotal.com. I have also tried the ESET online scanner, but the popup scanner failed to load.
I also ran an Avast antivirus quickscan that detected and repaired two infections. After those repairs happened, I began noticing repeat messages saying that powershell is not working and asking to close it.