Rechercher

1) Using ClearLNK tool repair following links and attach tool's report to your message.

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
C:\Users\Natascha\AppData\Roaming\Microsoft\Internet Explorer\Quick Lau...

1)  I recommend to uninstall this:

Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Unity Web Player (HKU\S-1-5-21-336042120-3881833094-1070839671-1001\...\UnityWebPlayer) (Version: 4.6.1f1 - Unity Technologies ApS)

2)   

Download fixlist.txt file and save it to the Desktop.

NOTE. It's important that both files, FRST/F...

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Please also check Shortcut.txt
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated link.

Hello,

1. Download *Malwarebytes* here: https://www.malwarebytes.com/mwb-download/thankyou/.
2. Launch Malwarebytes from your desktop
3. Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
4. Tab Scan choose Threats scan, click on Start scan.
5. If something is detected, choose to Quarantine everything. If it asks you to reboot the computer, do ...

You're right, nice catch! But that really is my main firefox profile. Did malware hacked its name, or what?

I searech for this profile ID and found in int he following places:

c:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\41a66e7e5ee1

c:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41a66e7e5ee1

I am certain that when I told adwcleaner to delete this folder, my firefox pro...

This element seems to be a FP caused by a generic detection.  

Sorry, but I don't think so.

There are  - only at the german TB forum - at least 50 topics with this ff profilename "41A66E7E5EE1".

Usually, every ff profilename is almost unique, 41A66E7E5EE1 isn't unique.

It is related to Yondoo browser hijacker, I've seen multiple topics with this variant.

my suggestion:

Check profiles.i...

Hello,

This detection is triggered by the fake firefox profile generic, which is a FP in your case.. Please uncheck it before cleaning.

Can you share the whole logfile too?

Thanks,

Hello, this is my fist post. AdwCleaner is an amazing tool which saved my skin multiple times, but now I have an issue.

This is from the log:

***** [ Folders ] *****

Folder Found:  C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\41A66E7E5EE1

When I don't uncheck it, then AdwCleaner removes my whole Firefox profile folder, so I lose all my seetings, browsing history, etc. I had to ...

Hello,

Please use the following process while we'll release the next AdwCleaner version:

1. Download *Malwarebytes* here: https://www.malwarebytes.com/mwb-download/thankyou/.
2. Launch Malwarebytes from your desktop
3. Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
4. Tab Scan choose Threats scan, click on Start scan.
5. If something is de...

Hello,

Sorry for the delay.

Can you relaunch AdwCleaner, do a scan, and uncheck:

• UCGuard from the Services tab,
• C:\WINDOWS\SysNative\drivers\ucguard.sys from the Files tab

Then, do a clean and share the generated logfile.

Regards,