Search

Unfortunately it still gets killed. I suspect it is javaw.exe since the remote software program runs on Java

http://i.imgur.com/ImbkIiJ.png

javaw.exe shows up twice in the debug log but it is not whitelisted.

Appreciate your help

Bonsoir,

j'utilise Windows 10, j'ai Windows Defender comme antivirus, Malwarebytes Anti-Malware Home (Premium) et Adwcleaner 6.010.

L'analyse antivirus ne trouve rien,

Malwarebytes ne trouve rien,

Adwcleaner me signale 2 clés de registre et je ne sais pas à quoi elles correspondent et s'il faut les supprimer.

Je joins le rapport Adwcleaner.

Merci d'avance pour votre réponse.

Jean 85

...

There are two files. First the one of 8.52 AM

# AdwCleaner v6.010 - Logbestand aangemaakt 06/09/2016 op 08:52:48 # *Updated on 12/08/2016 by ToolsLib # Gebruik lokale database : 2016-08-24.2 [Lokaal] # Besturingssysteem : Windows 10 Home  (X64) # Gebruikersnaam : Test - W10-HAH-TEST-PC # Gestart vanuit : C:\Users\Test\Downloads\AdwCleaner.exe # *Mode: Scan # Ondersteuning : https://toolslib.ne...

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Bonjour fr33tux,

Voici le rapport d'ADWCLEANER comme convenu :

# AdwCleaner v6.010 - Rapport créé le 04/09/2016 à 19 : 15 : 28

 # Mis à jour le 12/08/2016 par ToolsLib

 # Base de données : 2016-09-03.2 [Serveur]

 # Système d'exploitation : Windows 10 pro (X64)

 # Nom d'utilisateur : Corentin - CORENTIN

 # Exécuté depuis : C:\Users\Corentin\Desktop\adwcleaner_6.010.exe

 # Mode: Scan

 #...

Ahh yes, my mistake. Here are the two logfiles from a scan I just ran in Debug mode.

AdwCleaner_debug:

2016-09-03 18:38:49 :     <INFO>    [main] - Saving current options to the configuration file 2016-09-03 18:38:50 :     <INFO>    [main.gui] - Scan requested 2016-09-03 18:38:50 :     <INFO>    [scan] - Running from: C:\AdwCleaner 2016-09-03 18:38:50 :     <INFO>    [scan] - Progress: 0% 20...

Hello,

Also, if you still have the software killed, please share the debug log from AdwCleaner:

• Activate the options with Tools > Options > "Debug" in "Mode" section,
• Do a scan and a clean,
• Share the file C:\AdwCleaner\AdwCleaner_Debug.log.

Best regards,

Hello,

Thanks, I've made some tests and the software should not be killed anymore (effective in a few minutes).

Best regards,

Good morning! So I re-ran AdwCleaner in Safe Mode, pressed Clean when it found 30 threats, and was once again prevented from a boot menu upon pressing F8 at startup. Argh!  

There is not a file called C:\AdwCleaner\AdwCleaner_Debug.log.

AdwCleaner[C2] looks like this:

# AdwCleaner v6.010 - Logfile created 03/09/2016 at 09:13:48 # Updated on 12/08/2016 by ToolsLib # Database : 2016-09-03.1 [S...

Hi, thanks for responding.

Well that should be good news!

Is the log file the same as the application file in Malwarebytes? It is not very detailed....

Here is the last file of the last scan I did (of several):

Malwarebytes Anti-Malware www.malwarebytes.org

Scan Date: 31/08/2016 Scan Time: 3:25:56 PM Logfile: mbam.txt Administrator: Yes

Version: 2.2.1.1043 Malware Database: v2016.08.31...