I don't know if I should bc I restored the deleted entries and internet started working again :)
hel22, 2017-02-12 19:44:12 (UTC)
So, you just restored all these registry entries (from your screenshot) and Internet started working again, right?
I don't know if I should bc I restored the deleted entries and internet started working again :)
hel22, 2017-02-12 19:44:12 (UTC)
So, you just restored all these registry entries (from your screenshot) and Internet started working again, right?
I don't know if I should bc I restored the deleted entries and internet started working again :)
But I probably won't use ADW cleaner again :(
here you go
Fix result of Farbar Recovery Scan Tool (x64) Version:04-10-2015 Ran by Hunter Cutbush (2017-02-01 16:47:17) Run:1 Running from C:\Users\Hunter Cutbush\Desktop\New folder Loaded Profiles: Hunter Cutbush (Available Profiles: Hunter Cutbush) Boot Mode: Normal ==============================================
fixlist content: ***************** CreateRestorePoint: CloseProcesses: R2 UCG...
Samwellajackson, Until instructed otherwise. I can try and help you out until Fr33tux or cocochepeau respond.
Have you tried booting into safemode and Deleting the C:\WINDOWS\SysNative\drivers\ucguard.sys file manually? If not I'd create a system restore point and try that.
Voici le rapport:
# DelFix v1.013 - Rapport créé le 08/01/2017 à 16:09:25
# Mis à jour le 17/04/2016 par Xplode
# Nom d'utilisateur : Mr GUERRY - HP-OMNI27
# Système d'exploitation : Windows 7 Home Premium Service Pack 1 (64 bits)
~ Activation de l'UAC ... OK
~ Suppression des outils de désinfection ...
Supprimé : C:\AdwCleaner
Supprimé : C:\Users\Mr GUERRY\Desktop\AdwCleaner fermeture.JPG...
Hello, Pelle!
It's sad to say, but all versions of Locky ransomware, including .shit can't be decrypted. The only thing that you can do is to delete the virus from your PC and try to avoid the suchlike infection next time. Of course, you should keep the encrypted files somewhere, to be able to decrypt them when the decryption tool will be released. If you're interested in this - this article m...
Delfix.txt:
# DelFix v1.013 - Logfile created 26/11/2016 at 21:14:24 # Updated 17/04/2016 by Xplode # Username : M2-1900 - DESKTOP-KCS8S2N # Operating System : Windows 10 Pro (64 bits)
~ Activating UAC ... OK
~ Removing disinfection tools ...
Deleted : C:\FRST Deleted : C:\AdwCleaner Deleted : C:\Users\M2-1900\Downloads\Addition.txt Deleted : C:\Users\M2-1900\Downloads\adwcleaner_6.000 (1...
ADWCleaner deleted a folder saved on my desktop. As per suggestions on this thread, I ran the Quarantine Manager to restore the files. It worked. Files restored and my pc is much faster now after Ive deleted all those adware.
Thank you for this product.
DEAR ALL
I FOUND SOME REGISTRY KEY USEFUL UPON SEARCH ON INTERNET, LIKE
HKLM\SOFTWARE\Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628} ADW CLEANER HAS DETECTED THIS AS A THREAT, THE DETECTED THREATS ARE LISTED BELOW
-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628} [-] ...
hello cocochepeau,
thank you for helping! It took me quite a while to restore all the 7000+ files and folders with ownership and next step applying users/rights to all these objects. wrote some scripts what helped.
What i'm still curious about is: what happened - the task went thru the whole procedure correctly an after restarting the logfile appeared as usual. However - it went nuts.
I eve...