AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

In complement, can you do the following ?

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If it asks you to reboot the computer, do it.
• After the reboot (or at the end of the exam), launch Malwarebytes -> click on History -> Application logs -> Select the last exam log -> Show.
• Click on Export -> text file (*.txt) -> Choose the desktop as destination, name the file "report-mbam" for example, and click on Save.
• Paste the logfile in your next answer.

Then, redo a scan with AdwCleaner and share the logfile.

Best regards,

Thanks for your prompt response!

MBAM report: https://up2sha.re/file?f=a8p2vGsmQ6Bp

AdwCleaner now reports no threats!

:)

Hello,

Perfect ! If you have any question, just ask.

Best regards,

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

• Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the 4 installed browsers, including IE and Edge.
• Windows: Settings: System: Default apps: Choose default applications by file type: .htm shows neither Chrome nor Opera, but shows BrowserAir!

Indeed, there are still many references to BrowserAir in the Registry, mostly to "C:\Users\Alan\AppData\Local\BrowserAir\Application\BrowserairExec.exe" which has now been removed.

Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.

Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

Hello,

It's really nice, thanks a lot ! :)

Every day, Windows Defender is detecting at least one Trojan on my PC.

MBAM is reporting that a copy of Windows' shortcut to the Messenger app in my Startup folder is a Trojan.Agent threat.  While it is possible that the recent attack has infected this shortcut, MBAM doesn't report any threat when I rename the shortcut or scan a copy of the same shortcut in a different location.

Is this a bug in MBAM, or scare tactics to get me to buy MBAM?

Hello,

Can you share a logfile showing the "Trojan.Agent" detection ?

Thanks,

[Duplicate post deleted.]

MBAM report: https://up2sha.re/file?f=wGplpSSSGMV6

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

Suspect shortcut.

It seems like muc antivirus software can not detect MPC Cleaner. I know one can do. SpyHunter,

If you do not want to use it, you can follow the manual removal here

But the manual removal is a little complicated.

Hello,

Sorry for being so late to answer. Don't hesitate to "up" the topic by replying in it if you don't have any answer within three days.

Thanks for the shortcut.

@haronaroum: I strictly discourage any use of Spyhunter until the case involving Enigma (SpyHunter's editor) is solved. There are a lot of means to get rid of MPC Cleaner, just create your own topic on this forum and we'll help you.

Best regards,

Well...since the link of manual removal is deleted, I just want to tell you that if you can not remove MPC Cleaner from control panel, you find its location and click its "uninstaller" file there. As a result, you can manually remove it. There is one thing you should note that it has more than one "unisntaller" file in different folders. You should find them all and clcik them.

Good luck!