I used adwcleaner to clean these viruses but they just keep on returning after boot-up.
Here are the names:
-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz
-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...
Bonjour fr33tux,
Voici le rapport d'ADWCLEANER comme convenu :
# AdwCleaner v6.010 - Rapport créé le 04/09/2016 à 19 : 15 : 28
# Mis à jour le 12/08/2016 par ToolsLib
# Base de données : 2016-09-03.2 [Serveur]
# Système d'exploitation : Windows 10 pro (X64)
# Nom d'utilisateur : Corentin - CORENTIN
# Exécuté depuis : C:\Users\Corentin\Desktop\adwcleaner_6.010.exe
# Mode: Scan
#...Hello,
@Albertsudarto
Sorry for the confusion. anhthe2812 case should be resolved quickly. Otherwise, we'll just open a new thread for him.
fr33tux will review your file as soon as he can. :)
Regards.
ich hoffe das mir AdwCleaner beim Entfernen von Malware hilft
Hello,
Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?
We'll remove UCGuard then.
Thanks,
fr33tux, 2016-08-31 16:08:42 (UTC)
its here https://up2sha.re/file?f=diRbPZ8EDo67 sorry for late reply
It here: https://up2sha.re/file?f=AC13Sy5Qg47S
anhthe2812, 2016-08-31 16:13:42 (UTC)
^who is this guy ? sorry moderator but its not my file this guy just bumped in and...
Hello,
Thanks for the debug log. I'm working on it, and keep you informed asap (48-72 hours).
Sorry for the inconvenience,
Hello,
I'm working on it closer, and I'll keep you informed asap (48-72hours).
Sorry for the inconvenience, and thanks for your help :)
Thank you for taking the time to work with me on this. It is greatly appreciated.
In the debug log I see SimpleService.exe as a service being killed with no whitelist line under it but it appears that file isn't actually the file that keeps the remote session active anyways.
I manually killed the SimpleService.exe service and the remote session stays active with no problems.
Please see scree...
Ahh yes, my mistake. Here are the two logfiles from a scan I just ran in Debug mode.
AdwCleaner_debug:
2016-09-03 18:38:49 : <INFO> [main] - Saving current options to the configuration file 2016-09-03 18:38:50 : <INFO> [main.gui] - Scan requested 2016-09-03 18:38:50 : <INFO> [scan] - Running from: C:\AdwCleaner 2016-09-03 18:38:50 : <INFO> [scan] - Progress: 0% 20...Hello,
the change is effective with the definitions updates (automatically done at the beginning of a scan if you have an active network connection). You can copy/paste the logfile in your answer if you're unsure about which definitions you have).
For the donation, you can refer to this page: https://toolslib.net/donate/ If you have any question, just ask.
Best regards,