Search

Hello,

Have you already done a "Clean", with UCGuard unselected in the Services tab ?

Of so, can you share me the file AdwCleaner[Cxx].txt ?

---

fr33tux, 2016-08-31 04:35:14 (UTC)

Sorry. but I can't find the files you mention

This is my debug file: https://up2sha.re/file?f=nZHWFJLPJAfb

And this is my last scan file: https://up2sha.re/file?f=S2JGUxQFAUDG

When I click clean it not work and the AdwCleaner not responding. I wait 30 minutes but nothing happen. I can't restart, shutdown or open task manger. Please help

This is my debug file: https://up2sha.re/file?f=nZHWFJLPJAfb

And this is my last scan file: https://up2sha.re/file?f=S2JGUxQFAUDG

When I click clean it not work and the AdwCleaner not responding. I wait 30 minutes but nothing happen. I can't restart, shutdown or open task manger. Please help

Hello,

Can you share me the logfile for the working cleaning you've made ?

Then we'll take care of UCGUard.

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)

Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.

Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

• Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the ...

Ok thanks so much for the quick response

So they aren't malicious in any way?

Hello,

In complement, can you do the following ?

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If i...