Rechercher

Hello,

Thanks for the feedback!

Can you share the remaining folders containing the .xpi?

Best regards,

---

fr33tux, 2016-11-15 19:00:21 (UTC)

Hello, i copy here the log file. You can see the folders address. AdwCleaner say "deleted", but after the system restart, still remain in system. Anyway, i write and repeat here for whom read this post: AdwCleaner makes it's job, isolate and quarantine...

Yes I did it, and rescaning found the same files with internet connection. But my problem still same. After reboot I scaning with Adw, and found Key  HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{10921475-03CE-4E04-90CE-E2E7EF20C814}. Adw cleaner can't delete this file. Every scan I found that.

Greetings,

Here is what we're going to try:

1. Download CCleaner from here, and install it.
2. Start CCleaner (there should be a shortcut on your Desktop)
3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
4. Then in Options  tab > Surveillance, untick the both boxes.
5. In the Clean tab, click on "Clean".
6. When the cleaning is done, go in the "Registry" tab...

Greetings,

@terryberi78 Nice to see that AdwCleaner is working great. :)

Regards.

ADWCleaner deleted a folder saved on my desktop. As per suggestions on this thread, I ran the Quarantine Manager to restore the files. It worked. Files restored and my pc is much faster now after Ive deleted all those adware. 

Thank you for this product. 

Hello,

Are you gonna help me with the remaining issue or are you done?

Hi

Yes, me... I deleted them after response of fr33tux

---> no any error anywhere after.... seems not to be "false positive" but really a Troyan adware

DEAR ALL 

I FOUND SOME REGISTRY KEY USEFUL UPON SEARCH ON INTERNET, LIKE 

HKLM\SOFTWARE\Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628} ADW CLEANER HAS DETECTED THIS AS A THREAT, THE DETECTED THREATS ARE LISTED BELOW

-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1EFB6596-857C-11D1-B16A-00C0F0283628} [-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{DD9DA666-8594-11D1-B16A-00C0F0283628} [-] ...

Hello,

Ok, so we may have something to try:

First, we'll remove AdwCleaner:

• Download DelFix from Xplode on your desktop;
• Launch it with administrator rights;
• Select all the option except the one proposing to save the registry;
• Then click on the "Execute" button;
• When everything is finish, the software will close itself;
• Then a report appear on the notepad, please copy paste it's content...

I run AdwCleaner and see that the UCguard from the services tab is gone. So i'm very happy with that.

But there are still a few things left.

1) In the AdwCleaner there are still 4 items from UC that come up every time i scan. Even after removing them.

Here is a log: 

Scan before removal: https://up2sha.re/file?f=AURzW6gVoZ9g

Log of removal: https://up2sha.re/file?f=LoRa1pErsdie

Scan after...