Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: My computer is being controlled by remote host using powershell wmi

26 Apr 2015   #11

windows 7 Home Premium

Thanks but as soon as I plug in the network cable the same thing will happen again, correct?

My System SpecsSystem Spec
27 Apr 2015   #12

W10 32 bit, XUbuntu 18.xx 64 bit

Quote   Quote: Originally Posted by Tyfahra View Post
Thanks but as soon as I plug in the network cable the same thing will happen again, correct?
Not sure but it shouldn't. I am asking for more help on this.

I am also trying to find out if you need to use the clean all or just the clean per each drive. Clean is faster than clean all.

Here is how to do the clean command use the installation disk, as I described in my previous post.

Diskpart hit enter
list disk hit enter
Select Disk 0 hit enter
Clean hit enter
exit hit enter
Hard reset, then install windows 7

If you have more that one hard drive installed repeat the step above for each drive and replace the 0 for each of your drives. If you have a external USB hard drive, do not connect it, while doing this.
My System SpecsSystem Spec
27 Apr 2015   #13
Microsoft MVP


Do you have all of your data backed up? If not copy it now to flash stick or external drive quarantine, to be fully scanned with Malwarebytes and SuperAntiSpyware before reimporting into new install. Report back to our Security forum the exact infections including logs which these scans find so they can recommend deeper scans before you reimport the data. Or do not reimport the data at all.

Then boot the Win7 disk into System Recovery Options to run Diskpart Clean All Command.

If in doubt about or in need of installation media, refer to Step 1 of Clean Reinstall Windows 7. On an uninfected PC that checks out clean with both of the above scans, confirm the ISO HASH or download a fresh ISO to burn to disk or flash stick using the tools provided. I have never seen the installation media be infected but you can be certain of this if the HASH matches on the ISO and you burn a fresh disk or stick on the uninfected PC.

This wipes the disk so thoroughly nothing can survive. There is nothing now that can invade your new install unless reimported with data that has not been thoroughly scanned from its quarantine location.

Now do a Clean Reinstall Windows 7 following those steps, using only the tools and methods suggested which assure you will get and keep a perfect install just like 1.4+ million others have without a single complaint. None of them have ever returned here who used those steps to say they were reinfected or had any other single problem.

Again, do not reimport your data until all scans come up clean. To be sure of this report anything found in scans to our Security forum.
My System SpecsSystem Spec

27 Apr 2015   #14
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Have you turned off "autorun/autplay"?
In all versions of Windows from XP to Windows 7, Autorun is executed before Autoplay, unless Autorun is disabled. If it’s not disabled, Autorun will execute and it will search for the Autorun.inf file.
AutoPlay - Turn On or Off

If you've downloaded a game (or anything else) from someone's infected flash drive, this would cause the 'bot' to run automatically.

Disconnect from the net, unplug the modem. Follow Brink's tutorial above.

Next.... make sure Proxy settings are disabled.
1) Under “Tools” in the browser tool bar select “Internet Options”.
2) In the “Internet Options” window that pops up, click the “Connections” tab at the top.
3) Click “LAN Settings” near the bottom of the “Connections” section.
4) If the “Proxy server” checkbox is marked with a check, click it to deselect/uncheck it.
5) Click “Ok” to close the “Local Area Network (LAN) Settings” window.
6) Click “Ok” to close the “Internet Options” window.

Now, Copy and paste these lines in Note pad.

@Echo on
attrib -h -s -r hosts
echo localhost>HOSTS
attrib +r +h +s hosts
ipconfig /release
ipconfig /renew
ipconfig /flushdns
netsh winsock reset all
netsh int ip reset all
shutdown -r -t 1
del %0

Save as flush.bat to your desktop.
Right click on the flush.bat file to run it as Administrator. Reboot once again

Run your Anti-virus program.

Before connecting your computer back to the Internet, find a known "clean" computer and change ALL your passwords... do not do that using the infected computer!

After doing all above reboot. Make sure "Proxy server" is still disabled under your LAN Settings.
Test whether internet connectivity is restored.
My System SpecsSystem Spec
27 Apr 2015   #15
Microsoft MVP

Windows 7 Ultimate 32bit SP1

Please let us know what you're experiencing now.
My System SpecsSystem Spec
01 May 2015   #16

windows 7 Home Premium

I did create a back up and it worked once. The option to restore from back up disk is not there anymore. They removed it. They even took out the windows experience benchmark. The one that rates your computer and tells you what components to upgrade. They changed the Microsoft agreement so that it's legal for them to do this, and microspft is not responsible. I tried to contact my friend who is a lawyer the email got sent back to me. I have voip or voice over internet home phone so they pretty much took control of all my communications. I got rid of my cell phone. I don't do anything to deserve this type of shit.
My System SpecsSystem Spec
01 May 2015   #17

windows 7 Home Premium

Oh thanks jacee I will try that. Ill let you know im gonna try that right now
My System SpecsSystem Spec
01 May 2015   #18

windows 7 Home Premium

Also wanted to say I have some weird programs on my computer.
Like a anything goes version of microsft word.
My System SpecsSystem Spec
01 May 2015   #19

windows 7 Home Premium

Looks like it removed the teredo and isatap tunnels in ip config. That's a good thing. I may be connected to remote host who is doing this. so all my internet traffic and phone goes through this remote host. they are the ones using the snap ins to manage my pc. Ill let you know how it goes.
My System SpecsSystem Spec
01 May 2015   #20

windows 7 Home Premium

Check out this fake microsoft privacy policy.
Microsoft may access or disclose information about you, including the content of your communications, in order to: (a) comply with the law or respond to lawful requests or legal process; (b) protect the rights or property of Microsoft or our customers, including the enforcement of our agreements or policies governing your use of the software; or (c) act on a good faith belief that such access or disclosure is necessary to protect the personal safety of Microsoft employees, customers, or the public.
Information collected by or sent to Microsoft by Windows 7 may be stored and processed in the United States or any other country in which Microsoft or its affiliates, subsidiaries, or service providers maintain facilities. Microsoft abides by the safe harbor framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of data from the European Union.

I hope im the only one that has this policy on my computer.
I know Microsoft didn;'t write this policy.
My System SpecsSystem Spec

 My computer is being controlled by remote host using powershell wmi

Thread Tools

Similar help and support threads
Thread Forum
Need help troubleshooting remote desktop host
Hi all, thanks for reading, Just for the record, I have successfully setup up many a Windows box with RD working just perfectly...but please assume I know nothing :) I built a new machine for a friend, and everything worked fine here at my home. I used RD to connect to the new machine often,...
Network & Sharing
Remote Destop Connects but Remote Host Screen Stays BLACK
Hello - I know there have been a number of posts on this subject but I have been unable to find a solution. I have 2 Win7 machines, both running SP1. My HP Pavilion is running 64-bit and my Dell Latiude E6400 is running 32-bit. I can successfully RDP from my Dell and even my Apple iPad (via an...
Network & Sharing
How can I determine if my laptop is controlled via remote
I believe my computer is being controlled remotely and I am unable to access and change many applications and functions. I know there is another administrator acct that uses certificates to log in and this administrator also controls the bios system. This is one reason I have been so...
System Security
IT USB Remote NDIS Network Problem- Cannot connect to host computer?
Okay, so here is the kick. I have a rather old Aztech Modem. Model is Aztech DSL600EU. Anyways this modem has a USB and Ethernet port. Okay, so I've been using it recently on the Ethernet wire, until recently I got a new com. So now I want both coms to work on the internet. Okay, so I started...
Network & Sharing
How to host my Computer for remote desktop connection
Dear Guru's, I am new to networking world, and I am trying to setup my computer as a host, so that i can access it using a different machine over the internet. Host Computer OS: Windows 7 Ultimate N My Router is D-Link: DIR 615 Help me guys, i am need of it.
Network & Sharing

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 14:03.
Twitter Facebook