Rechercher

Hello,

The logfile seems to be complete, it means that the clean process has been successful, without crashing. Also, I do not see any deleted elements related to safe-mode.

Can you also share the Malwarebytes logfile ?

Best regards,

1) Please, do the log MBAM as it noticed  below:

Download Malwarebytes' Anti-Malware or from the mirror. Install it (during setup do not choose free test period), update bases setup proxy if needed). Click on Scan tab, choose Custom and click on Scan Option. Choose all disk drives in next window, choose Warn in drop-down menu and press Scan.Do not delete nothing by yourself!!! After scan compl...

Here is the logfile. Two were actually made, 15 minutes apart. This is the later one:

# AdwCleaner v6.010 - Logfile created 01/09/2016 at 19:26:40 # Updated on 12/08/2016 by ToolsLib # Database : 2016-09-01.2 [Server] # Operating System : Windows Vista (TM) Home Premium Service Pack 2 (X86) # Username : # Running from : C:\Users\Downloads\adwcleaner_6.010.exe # Mode: Clean # Support : https://...

Suspect shortcut.

Ok.

So, to remove UCGuard, can you try this:

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If it as...

It here: https://up2sha.re/file?f=AC13Sy5Qg47S

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

MBAM report: https://up2sha.re/file?f=wGplpSSSGMV6

Hello,

Ok.

• So please launch AdwCleaner.
• Do a scan.
• Then, in the "Services" tab, please unselect "UCGuard".
• Click on "Clean", the computer will reboot.

Finally, please share the file C:\AdwCleaner\AdwCleaner[Cxx].txt (where xx is the highest number you have).

Best regards,

---

fr33tux, 2016-08-31 11:31:57 (UTC)

yeah. It work. but what is the "UCGuard"? How to delete it?

Thankss!