Search

Hello,

Yes, please do a scan first, followed by a clean.

Thanks,

I did not perform another scan with AdwCleaner as that part confused me. Am I to 'scan' and then 'clean' what it finds? I ask because when you open ADwCleaner, 'clean' is grayed out.

Log from MBAM:

Malwarebytes Anti-Malware www.malwarebytes.org

Scan Date: 02-Dec-16 Scan Time: 6:57 PM Logfile: Administrator: Yes

Version: 2.2.1.1043 Malware Database: v2016.12.02.12 Rootkit Database: v2016.11....

Hello,

Can you relaunch it, do a clean. Then, share the logfile shown at reboot.

Then, use MBAM:

• Please download MBAM: https://www.malwarebytes.com/mwb-download/thankyou/
• On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
• Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
• Click on the Sca...

https://up2sha.re/file?f=mzCDRFs9V7xU

Hello

Can you share AdwCleaner logfiles ?

You can get them from C:\AdwCleaner\AdwCleanerC[xx].txt and C:\AdwCleaner\AdwCleanerS[xx].txt

Please host them on https://up2sha.re/ and copy/paste the generated links here.

http://imgur.com/a/g2OGz

SCreenshot ^

What does this mean? I don't wish to remove/delete it as it sounds ominous.

I'm under the impression my machine has a virus. Less than 30 minutes ago, windows were opening and closing themselves simultaneously to the point of me rebooting.

Bonjour ,

Je viens de m'inscrire à l'instant car je rencontre le même problème . J'ai fait plsueirs scan et suppression de cette clé et ses deux clé reviennent sans cesse lorsque je rallume mon pc

Key Found:  KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90} Key Found:  KLM\SOFTWARE\CLASSES\APPID\WinZipSmartMonitorService.exe

Suite à cela j'ai fait un scan en profondeur av...

Bonjour ,

Je viens de m'inscrire à l'instant car je rencontre le même problème . J'ai fait plsueirs scan et suppression de cette clé et ses deux clé reviennent sans cesse lorsque je rallume mon pc

Key Found:  KLM\SOFTWARE\CLASSES\APPID\{93469602-4134-4012-A6BC-3E73B9855F90} Key Found:  KLM\SOFTWARE\CLASSES\APPID\WinZipSmartMonitorService.exe

Suite à cela j'ai fait un scan en profondeur av...

Hello, Pelle!

It's sad to say, but all versions of Locky ransomware, including .shit can't be decrypted. The only thing that you can do is to delete the virus from your PC and try to avoid the suchlike infection next time. Of course, you should keep the encrypted files somewhere, to be able to decrypt them when the decryption tool will be released. If you're interested in this - this article m...