Search

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

---

fr33tux, 2016-08-31 16:08:42 (UTC)

its here https://up2sha.re/file?f=diRbPZ8EDo67 sorry for late reply

It here: https://up2sha.re/file?f=AC13Sy5Qg47S

---

anhthe2812, 2016-08-31 16:13:42 (UTC)

^who is this guy ? sorry moderator but its not my file this guy just bumped in and...

Hi,

I had some unwanted popups the other day and seemed to remove them.

As AdwCleaner is recommended for adware/pups, I thought I'd try it out to see if Malwarebytes found everything.

The scan itself was quick, but the removing part took longer, and when it got to the end it crashed (screen went wonky and discoloured, my disabled avira taskbar icon had a big red x through it) and restarted. ...

Suspect shortcut.

Ok.

So, to remove UCGuard, can you try this:

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If it as...

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

MBAM report: https://up2sha.re/file?f=wGplpSSSGMV6

[Duplicate post deleted.]

Hello,

Can you share a logfile showing the "Trojan.Agent" detection ?

Thanks,