Hi,

I've read another thread about my problem and i wanted to ask if somebody can help me too.

The problem i have is that i have a virus on my laptop and i have tried to delete it with different "scanners" like Malwarebyte, Ccleaner, Esetonline scanner & AdwCleaner. The most of the virus is gone but there is 1 service in AdwCleaner that i can't remove. Everytime i want to clean it in AdwCleaner the program does not responed anymore and i have to restart my laptop. The virus is UCguard. I hope that somebody can help me.

Re: Can't delete UCguard

  • Download FRST
  • Right-click on the file -> "Execute as Administrator"
  • Please also check Shortcut.txt
  • Click on the "Scan" button
  • The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
  • Please host them on Up2Share and share the generated link.

Re: Can't delete UCguard

Here are the links to the logfiles from FRST.

FRST.txt:  https://up2sha.re/file?f=NRQTQ4o1PVXr

Addition.txt:  https://up2sha.re/file?f=pQxqmrNnfolG

Re: Can't delete UCguard

Here are the links to the logfiles from FRST.

FRST.txt:  https://up2sha.re/file?f=NRQTQ4o1PVXr

Addition.txt:  https://up2sha.re/file?f=pQxqmrNnfolG

Re: Can't delete UCguard

 Shortcut.txt also host them on Up2Share and share the generated link.  

Re: Can't delete UCguard

1)  I recommend to uninstall this:

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Unity Web Player (HKU\S-1-5-21-336042120-3881833094-1070839671-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

2)   

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

Run FRST/FRST64 and press the Fix button just once and wait. If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run. When finished FRST will generate a log on the Desktop (Fixlog.txt). Please post it to your reply.

3) Check these files on [url=http://www.virustotal.com/index.html]virustotal[/url]. [CODE]C:\WINDOWS\system32\chtbrkg.dll C:\WINDOWS\SysWOW64\chtbrkg.dll[/CODE] Press [b]Choose File[/b] button, find the requested file in your system - [b]Browse[/b] - [b]Scan it! [/b] Press [b]Reanalyse[/b] button if needed. Wait for the complete result. Link to this result (from browser's address bar) copy to your next post.  

Re: Can't delete UCguard

1) Using ClearLNK tool repair following links and attach tool's report to your message.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk
 

2) Uninstall via Control Panel bl and ph.

3) Make a log file using Check Browsers' LNK by Dragokas & regist

4) Make new  FRST logs.  

Re: Can't delete UCguard

 What now with problem?    

Re: Can't delete UCguard

I run AdwCleaner and see that the UCguard from the services tab is gone. So i'm very happy with that.

But there are still a few things left.

1) In the AdwCleaner there are still 4 items from UC that come up every time i scan. Even after removing them.

Here is a log: 

Scan before removal: https://up2sha.re/file?f=AURzW6gVoZ9g

Log of removal: https://up2sha.re/file?f=LoRa1pErsdie

Scan after removal: https://up2sha.re/file?f=feJpPvdlLrUF

2) A lot of Windows apps and services won't open. Like the start button won't work (Windows 10). I can use the right mouse button to get to things but just opening the startmenu won't work. And a lot of things on the taskbar/notification area won't open.

3) Chrome opens normal now. No redirection to some fake google site. The only thing is that Chrome opens separate in the taskbar as you can see in the picture:

 

Maybe it's just a setting issue.

I think that are the remaining issues.

Re: Can't delete UCguard

Hello,

Are you gonna help me with the remaining issue or are you done?