user_avatar****

I got infected with loads of adware after trying to install SUPER file converter.

I have run Windows Defender to remove trojans and a malware installer.

Whichever Prinicpal I give Full Control, there is always some other Principal's permission lacking to delete Program Files (x86)\MPC Cleaner.

Running AdwCleaner isn't managing to do so either.  Log file: https://up2sha.re/file?f=4pnRQn2e5du8.

BrowserAir had been installed with a fake uninstaller that I didn't dare use. That no longer appears in Programs and Features, but elements of it and SearchModule are still not being removed by AdwCleaner.

What next?

 

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

In complement, can you do the following ?

  • Download MalwareBytes Anti Malware here.
  • Launch MalwareByte's Anti Malware from your desktop
  • Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
  • Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
  • If something is detected, choose to Quarantine everything. If it asks you to reboot the computer, do it.
  • After the reboot (or at the end of the exam), launch Malwarebytes -> click on History -> Application logs -> Select the last exam log -> Show.
  • Click on Export -> text file (*.txt) -> Choose the desktop as destination, name the file "report-mbam" for example, and click on Save.
  • Paste the logfile in your next answer.

Then, redo a scan with AdwCleaner and share the logfile.

Best regards,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Thanks for your prompt response!

MBAM report: https://up2sha.re/file?f=a8p2vGsmQ6Bp

AdwCleaner now reports no threats!

:)

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

Perfect ! If you have any question, just ask.

Best regards,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

  • Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the 4 installed browsers, including IE and Edge.
  • Windows: Settings: System: Default apps: Choose default applications by file type: .htm shows neither Chrome nor Opera, but shows BrowserAir!

Indeed, there are still many references to BrowserAir in the Registry, mostly to "C:\Users\Alan\AppData\Local\BrowserAir\Application\BrowserairExec.exe" which has now been removed.

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.

Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

It's really nice, thanks a lot ! :)

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Every day, Windows Defender is detecting at least one Trojan on my PC.

MBAM is reporting that a copy of Windows' shortcut to the Messenger app in my Startup folder is a Trojan.Agent threat.  While it is possible that the recent attack has infected this shortcut, MBAM doesn't report any threat when I rename the shortcut or scan a copy of the same shortcut in a different location.

Is this a bug in MBAM, or scare tactics to get me to buy MBAM?

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

Can you share a logfile showing the "Trojan.Agent" detection ?

Thanks,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

It seems like muc antivirus software can not detect MPC Cleaner. I know one can do. SpyHunter,

Spyhunter detects mpc cleaner

If you do not want to use it, you can follow the manual removal here

But the manual removal is a little complicated.

 

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Hello,

Sorry for being so late to answer. Don't hesitate to "up" the topic by replying in it if you don't have any answer within three days.

Thanks for the shortcut.

@haronaroum: I strictly discourage any use of Spyhunter until the case involving Enigma (SpyHunter's editor) is solved. There are a lot of means to get rid of MPC Cleaner, just create your own topic on this forum and we'll help you.

Best regards,

Re: AdwCleaner can't remove Program Files (x86)\MPC Cleaner

Well...since the link of manual removal is deleted, I just want to tell you that if you can not remove MPC Cleaner from control panel, you find its location and click its "uninstaller" file there. As a result, you can manually remove it. There is one thing you should note that it has more than one "unisntaller" file in different folders. You should find them all and clcik them.

 

Good luck!