Trojan Dropped by W2KM_POWLOAD.THAABCAH are Trojan.Pidief, NoFolderOptions, Rodvir, Trojan-Downloader.Agent.bnd, Trojan:AutoIt/Agent.C, Trojan.JS.Redirector.nj, Infticker, Trojan.Downloader.Small.afht, Packed.Generic.244, Startup.GG, SysWebTelecomInt, Trojan.Riemon, Xorpix.C.dll
Related spyware RemEye, Ashlt, iSearch, Rootkit.Agent.DP, ICQMonitor, Worm.Zhelatin.GG, TSPY_DROISNAKE.A, Spyware.Keylogger, SideBySide, Multi-Webcam Surveillance System, NaviHelper, NetSky, NetBrowserPro, Spyware.SafeSurfing
Windows Error caused by W2KM_POWLOAD.THAABCAH are – 0x8024000C WU_E_NOOP No operation was required., 0x00000070, 0xf0817 CBS_E_PACKAGE_DELETED package was uninstalled and is no longer accessible, 0x00000013, 0x00000049, Error 0xC0000428, 0x80248003 WU_E_DS_TABLEMISSING The data store is missing a table., 0x80248014 WU_E_DS_UNKNOWNSERVICE An operation did not complete because the service is not in the data store.
W2KM_POWLOAD.THAABCAH infects these windows .dll files wshfr.dll, ubpm.dll, wbemads.dll, webhits.dll, bridgemigplugin.dll, authcert.dll, WMM2RES2.dll, Microsoft.PowerShell.ConsoleHost.dll, rtutils.dll, iernonce.dll, ftphost.dll

W2KM_POWLOAD.THAABCAH may have entered your pc through these software. If you have not installed them , then get rid of them The EMU 0.2b , Pick Up Pencils , fruux 2.2 , IMDb Monitor 1.0 , Audiophile 2.0b6 , Bitwig Studio v1.0.6 , Cookie Monster 1.5.1 , Valves Air Flow & Ports Dyno Simulation 1.3 , Container 2.4.0 , Venice Slots 1.5 , iPowerHour 1.0 , Professor Fizzwizzle 1.0 , HookUp , Defend Your Castle 1.1.1 , LayerLink 1.2




Everything was fine till last night. Today as I opened my PC I got an alert message to update Adobe Reader. As it is an application which I use frequently therefore I accepted the terms and condition to update it in a hurry. But suddenly I came to notice that W2KM_POWLOAD.THAABCAH has also get installed in my PC due to the fake update done by me. I was alerted by my antivirus program about its entry, but it was not able to trace its location. W2KM_POWLOAD.THAABCAH is now creating problems for me to work properly. Someone please help me to come out of this situation.


Type Trojan
Danger Level Low
System Affected Windows
Symptoms Generates unwanted search results, pop-ups ad, makes certain applications inaccessible
Distribution Channel Spam email messages

Concise Explanation Of W2KM_POWLOAD.THAABCAH

W2KM_POWLOAD.THAABCAH is an unwanted program which belongs to the family of trojan that capable to alters your browsing experience by generating some unwanted and irrelevant search results, increases traffic to some advertisements sites by which it earns for its developer on the basis of pay-per-click. The family bombarded by W2KM_POWLOAD.THAABCAH performs different functions such as downloading updates which are generally fake updates which help the trojan to add more dangerous malware to your computer.

W2KM_POWLOAD.THAABCAH is developed using some potential algorithm which makes it difficult for your antivirus to detect and remove it easily. If it manages to persist for a long duration in your PC it can corrupt some program files which can make certain application inaccessible. It may also register a new entry in your Window’s registry using which it will automatically initiate itself each time you reboot your system. It is also capable of stealing your personal data like user id, password, banking details and many more. As it increases the utilization of CPU by downloading junk files which covers all the remaining memory of the computer results in system hang or collapse.


W2KM_POWLOAD.THAABCAH enters into your PC at the time you open an attachment to an spam email. Spam email makes you aggressive and anxious to know about the underlying information in the mail, if you get tricked by the trojan to open the attachment your system will soon be injected by W2KM_POWLOAD.THAABCAH. It may also intrude into your PC at the time of downloading updates of some software from the sites which don’t have good reputation.

How to Remove W2KM_POWLOAD.THAABCAH from Compromised PC (Manual Steps)

(This guide is intended to help users in following Step by Step instructions in making Windows Safe)


The first step which need to be followed is to Restart Windows PC in Safe Mode

Reboot in Safe Mode (For Windows XP | Vista | Win7)

  1. Restart Computer
  2. Tap on F8 continuously when the PC starts booting and select the option to enter Safe Mode with Networking.

safe mode

For Windows 8/8.1

  1. Press on the Start Button and then Choose Control Panel from the menu option
  2. Users need to opt for System and Security, to select Administrative Tools and then System Configuration.


3.  Next, Click on the Safe Boot option and then choose OK, this will open a pop-up window, next Select Restart Option.

For Windows 10

  1. Start Menu is to be selected to Open it
  2. Press the power button icon which is present in the right corner, this will display power options menu.
  3. Keeping the SHIFT Key pressed on the keyboard, select the restart option. This will reboot Win 10
  4. Now you need to select the Troubleshoot icon, followed by advanced option in the startup Settings. Click on Restart. This will give the option to reboot, now select Enter Safe Mode with Networking.

Step 2. Uninstall W2KM_POWLOAD.THAABCAH from Task Manager on Windows

How to End the Running Process related to W2KM_POWLOAD.THAABCAH using Task Manager

  1. Firstly, Open Task Manager by Pressing Ctrl+Shift+Esc in Combination
  2. Next, Click on processes to Find W2KM_POWLOAD.THAABCAH
  3. Now Click and select End Process to terminate W2KM_POWLOAD.THAABCAH.

task manager

Step3: How to Uninstall W2KM_POWLOAD.THAABCAH from Control Panel on Windows

for Win XP| Vista and Win 7 Users

  1. Click and Select on Start Menu
  2. Now Control Panel is to be selected from the list
  3. Next Click on Uninstall Program
  4. Users need to Choose suspicious program related to W2KM_POWLOAD.THAABCAH and right clicking on it.
  5. Finally, Select Uninstall option.





For Win 8

  • Click and Select “Charms bar
  • Now Select Settings Option
  • Next Click on Control Panel
  • Select on Uninstall a Program Option and right click on program associated to W2KM_POWLOAD.THAABCAH and finally uninstall it.



For Windows 10

  1. The first Step is to Click and Select on Start Menu
  2. Now Click on All Apps
  3. Choose W2KM_POWLOAD.THAABCAH and other suspicious program from the complete list
  4. Now right Click on to select W2KM_POWLOAD.THAABCAH and finally Uninstall it from Windows 10




Step: 4 How to Delete W2KM_POWLOAD.THAABCAH Created Files from Registry

  • Open Registry by Typing Regedit in the Windows Search Field and then press on Enter.
  • This will open the registry entries. Now users need to press CTRL + F together and type W2KM_POWLOAD.THAABCAH to find the entries.
  • Once located, delete all W2KM_POWLOAD.THAABCAH named entries. If you are unable to find it, you need to look up for it on the directories manually. Be careful and delete only W2KM_POWLOAD.THAABCAH entries, else it can damage your Windows Computer severely.
HKEY_CURRENT_USER—-Software—–Random Directory. 
HKEY_CURRENT_USER—-Software—Microsoft—-Windows—CurrentVersion—Run– Random
HKEY_CURRENT_USER—-Software—Microsoft—Internet Explorer—-Main—- Random


Still having any problem in getting rid of W2KM_POWLOAD.THAABCAH, or have any doubt regarding this, feel free to ask our experts.

Skip to toolbar