So i've been trying to get rid of UC Guard for about 2-3 days now. Everytime i run AdwCleaner it detects it and when i go to clean it AdwCleaner just freezes and goes to "Not Responding". I tried to get UC Guard only to show up but everytime i try to get it there's always Regristry, and something else and UC Guard as service. I've tried Malwarebytes it doesn't detect it. Please help i really need this gone. Also if you need logs, i will provide but i just need someone to tell me how to give it to you, and how to find it on my computer.

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

Hello,

Can you copy/paste AdwCleaner logfile from C:\AdwCleaner\AdwCleaner[Sxx].txt ?

 

Thanks,

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

okay :D Thanks for perplying so early :D

# AdwCleaner v6.043 - Logfile created 31/01/2017 at 19:17:55 # Updated on 27/01/2017 by Malwarebytes # Database : 2017-01-31.1 [Local] # Operating System : Windows 10 Home  (X64) # Username : Hunter Cutbush - HUNTER # Running from : C:\Users\Hunter Cutbush\Downloads\adwcleaner_6.043 (1).exe # Mode: Scan # Support : https://www.malwarebytes.com/support

***** [ Services ] *****

Service Found:  UCGuard

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

File Found:  C:\WINDOWS\SysNative\drivers\ucguard.sys

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious keys found.

***** [ Shortcuts ] *****

No infected shortcut found.

***** [ Scheduled Tasks ] *****

No malicious task found.

***** [ Registry ] *****

Key Found:  HKCU\Software\Microsoft\Internet Explorer\DOMStorage\amazonbrowserapp.com Key Found:  HKCU\Software\Microsoft\Internet Explorer\DOMStorage\analytics.app.amazonbrowserapp.com Key Found:  [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\amazonbrowserapp.com Key Found:  [x64] HKCU\Software\Microsoft\Internet Explorer\DOMStorage\analytics.app.amazonbrowserapp.com

***** [ Web browsers ] *****

No malicious Firefox based browser items found. No malicious Chromium based browser items found.

*************************

C:\AdwCleaner\AdwCleaner[C1].txt - [17392 Bytes] - [16/02/2016 07:48:48] C:\AdwCleaner\AdwCleaner[C2].txt - [7899 Bytes] - [29/01/2017 22:08:03] C:\AdwCleaner\AdwCleaner[C3].txt - [2105 Bytes] - [31/01/2017 16:51:23] C:\AdwCleaner\AdwCleaner[S10].txt - [1596 Bytes] - [31/01/2017 19:17:55] C:\AdwCleaner\AdwCleaner[S1].txt - [16444 Bytes] - [16/02/2016 07:45:19] C:\AdwCleaner\AdwCleaner[S2].txt - [7628 Bytes] - [28/01/2017 15:44:28] C:\AdwCleaner\AdwCleaner[S3].txt - [7883 Bytes] - [28/01/2017 16:02:18] C:\AdwCleaner\AdwCleaner[S4].txt - [7956 Bytes] - [28/01/2017 16:18:50] C:\AdwCleaner\AdwCleaner[S5].txt - [7541 Bytes] - [29/01/2017 18:02:42] C:\AdwCleaner\AdwCleaner[S6].txt - [7613 Bytes] - [29/01/2017 22:07:05] C:\AdwCleaner\AdwCleaner[S7].txt - [2123 Bytes] - [31/01/2017 16:50:46] C:\AdwCleaner\AdwCleaner[S8].txt - [2268 Bytes] - [31/01/2017 16:59:50] C:\AdwCleaner\AdwCleaner[S9].txt - [2342 Bytes] - [31/01/2017 19:14:14]

########## EOF - C:\AdwCleaner\AdwCleaner[S10].txt - [2328 Bytes] ##########

 

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

Hello,

I just deleted the duplicate message. :) fr33tux will answer you asap.

Regards.

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

thank you very much! Oh yeah i forgot to tell you after i got that malware i keep getting ad websites coming in chrome every 8-10 minutes and it's starting to get really annoying, and on my headset still after i got the malware, my mic on my headset started not working i don't know if that has to do with malware too.

 

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

Hello,

  • Download FRST
  • Download fixlist.txt file and save it to the Desktop (with the name "fixlist.txt")

    NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

  • Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Best regards,

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

here you go 

Fix result of Farbar Recovery Scan Tool (x64) Version:04-10-2015 Ran by Hunter Cutbush (2017-02-01 16:47:17) Run:1 Running from C:\Users\Hunter Cutbush\Desktop\New folder Loaded Profiles: Hunter Cutbush (Available Profiles: Hunter Cutbush) Boot Mode: Normal ==============================================

fixlist content: ***************** CreateRestorePoint: CloseProcesses: R2 UCGuard; C:\WINDOWS\SysNative\drivers\ucguard.sys C:\WINDOWS\SysNative\drivers\ucguard.sys EmptyTemp: *****************

Restore point was successfully created. Processes closed successfully. UCGuard => Unable to stop service. UCGuard => service removed successfully "C:\WINDOWS\SysNative\drivers\ucguard.sys" => File/Folder not found. EmptyTemp: => 761.2 MB temporary data Removed.

The system needed a reboot.. 

==== End of Fixlog 16:48:18 ====

 

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

i scanned and there was no threats detected, well i hope so. I also still getting the chrome ad.

 

 

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

Ok.

Please do the following:

  • Relaunch frst
  • Right-click on the file -> "Execute as Administrator"
  • Please also check Shortcut.txt
  • Click on the "Scan" button
  • The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
  • Please host them on Up2Share and share the generated link

Thanks! 

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

which file do i "execute as administrator?"i checked all the boxes you wanted me too and im confused by rightclick "file?" and excute as admin. when i launch frst there's no file already loaded.

Re: Adwcleaner freezes everytime i try to get rid of UCGuard *Please help me get rid of it* And Malwarebytes doesn't detect it

Hello,

Thanks. Just give me some time to read these logfiles, and I'll answer back.