I am helping a friend clean a grossly infected computer. Windows 10. Uses McAfee AV.
He ran Malwarebytes 3 without difficulty and it cleaned with no problem at all. I do have the log if needed but cannot find a way to attach the text file
He then attempted to use AdwCleaner v. 7.0.3.1 but it would not complete cleaning and received a box with notification that a problem had stopped the clean....
RogueKiller V12.10.2.0 (x64) [Mar 27 2017] (Gratuit) par Adlice Software
email : http://www.adlice.com/contact/
Remontées : https://forum.adlice.com
Site web : http://www.adlice.com/fr/download/roguekiller/
Blog : http://www.adlice.com
Système d'exploitation : Windows 10 (10.0.14393) 64 bits version
Démarré en : Mode normal
Utilisateur : ALAIN [Administrateur]
Démarré depuis : C:\Pr...
Hi Xplode, sorry for dropping off the map like that. Life has been crazy.
Kaseya changed their paths; here's their current paths (I included our GUID, but other companies will have a different one):
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\AgentMon.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\curl.exe
C:\Program Files (x86)\Kaseya\KRNSNC47953309850771\DLLRunner32.exe
C:\P...2016-08-18 01:50:01 : <WARN> [scan.registry] - Found {E7270EC6-0113-4A78-B610-E501D0A9E48E} 2016-08-18 01:50:03 : <WARN> [scan.registry] - Found {E69D4A59-73DE-4E38-9FB3-740EC4D9060D} 2016-08-18 01:50:05 : <WARN> [scan.registry] - Found {02478D38-C3F9-4EFB-9B51-7695ECA05670} 2016-08-18 01:50:06 : <WARN> [scan.registry] - Found {EF99BD32-C1FB-11D2-892F-0090271D4F88} ...2016-08-18 01:45:37 : <INFO> [main.gui] - Clean requested 2016-08-18 01:45:41 : <INFO> [main.gui] - Killing all processes 2016-08-18 01:45:41 : <WARN> [main] - Killing [System Process](0) 2016-08-18 01:45:41 : <WARN> [main] - Killing System(4) 2016-08-18 01:45:41 : <WARN> [main] - smss.exe - (4) not killed - whitelisted 2016-08-18 01:45:41 : <WARN> ...Ran the version you provided Xplode. Still does the BSOD. Here's the debug:
2016-03-26 14:02:07 : [Notice] Scan started 2016-03-26 14:02:07 : [Success] Internet connection is UP 2016-03-26 14:02:09 : [Success] Loaded C:\Users\aditb\AppData\Local\Temp\sqlite.dll 2016-03-26 14:02:09 : [Success] Opened C:\AdwCleaner\adwcleaner.db 2016-03-26 14:02:09 : [Success] ...
Xplode, please help me... This is my debug log file...
And as a suggestion, why dont u create a .ini file where users can write processes names and make them whitelist ? it would help us all..
2016-03-25 13:27:15 : [Notice] Clean started 2016-03-25 13:27:16 : [Notice] Killing all processes 2016-03-25 13:27:16 : [Notice] Attempting to close [System Process] (PID:0) 2016-03-25 13:27:16 : ...
C:\Program Files\KaseyaAgent\{GUID}\AgentMon.exe
C:\Program Files\KaseyaAgent\{GUID}\curl.exe
C:\Program Files\KaseyaAgent\{GUID}\DLLRunner32.exe
C:\Program Files\KaseyaAgent\{GUID}\DLLRunner64.exe
C:\Program Files\KaseyaAgent\{GUID}\KASetup.exe
C:\Program Files\KaseyaAgent\{GUID}\Kaseya.AgentEndpoint.exe
C:\Program Files\KaseyaAgent\{GUID}\KaseyaRemoteControlHost.exe
C:\Program Files\Ka...
