Adwcleaner freezes when attempting to remove UCguard and UCguard.sys

Hello,

Can you share AdwCleaner and Malwarebytes logfiles?

Thanks,

ADWCleaner: http://pastebin.com/usz0jkWJ

Malwarebytes: http://pastebin.com/7kUDwQtZ

It seems like it is replicating itself since the only items detected yesterday were UCguard and UCguard.sys

Uhh, hello? This issue still persists and is majorly affecting my computer. Respond, please.

Samwellajackson, Until instructed otherwise. I can try and help you out until Fr33tux or cocochepeau respond. 

Have you tried booting into safemode and Deleting the C:\WINDOWS\SysNative\drivers\ucguard.sys file manually? If not I'd create a system restore point and try that.

Hello,

Sorry for the delay.

1. Please relaunch AdwCleaner,
2. Click on Tools > Options,
3. Here, tick "Debug" in the "Mode" section,
4. Then, do a scan.

When the results are shown, unselect the file "C:\WINDOWS\SysNative\drivers\ucguard.sys" and then click on the [Clean] button.

Please share the generated logfile shown at the reboot (also located at C:\AdwCleaner\AdwCleaner[Cxx].txt.

Best regards,

http://pastebin.com/nc0FUm8P

Tried deleting it in safe mode but it said it was open in another program.

Hello,

Thanks.

So:

• Download FRST

• Download fixlist.txt file and save it to the Desktop (with the name "fixlist.txt")

  NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

  NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

• Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

Best regards,

http://pastebin.com/0tQWTiUA

It just attempts to remove it forever. Left it on for hours. Nothing happened.

Hello,

it doesn't seem you use the correct fixlist.txt file - please double check with the one on my previous message:

Download fixlist.txt file and save it to the Desktop (with the name "fixlist.txt")

Thanks!

Sorry for not getting back to you. Forgot about it for a while. The fixlist removed ucguard.sys but AdwCleaner still detects just the UCGuard service. It no longer detects ucguard.sys.

Fixlog: http://pastebin.com/ub3mSyMP

AdwCleaner scan logfile: http://pastebin.com/ThzfSe1j

Please do the following:

• Relaunch frst
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link

FRST.txt: https://up2sha.re/file?f=TNrnllib9SDC

Addition.txt: https://up2sha.re/file?f=V5WWwN1d0eVM

1) Please careful open this file in Notepad copy and paste here its content

C:\PROGRA~1\Ozardevi\Muxuduii.bat

2) Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.