Re: Can't delete UC Guard

Hello,

Can you share AdwCleaner logfile? (Usually from C;\AdwCleaner\AdwCleaner[Sxx].txt)

Then, use MBAM:

  • Please download MBAM: https://www.malwarebytes.com/mwb-download/thankyou/
  • On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
  • Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
  • Click o...

Re: Dangerous?

Hello,

Thanks!

Please do the following:

  1. Download CCleaner from here, and install it.
  2. Start CCleaner (there should be a shortcut on your Desktop)
  3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
  4. Then in Options  tab > Surveillance, untick the both boxes.
  5. In the Clean tab, click on "Clean".
  6. When the cleaning is done, go in the "Registry" tab, c...

Re: AdwCleaner won't DELETE files. PLEASE HELP!!

Hello,

Please wait for at least a day before asking for help again if you don't have any answer.

  • Please download MBAM: https://www.malwarebytes.com/mwb-download/thankyou/
  • On the Settings tab > Detection and Protection sub tab, Detection Options, tick the box "Scan for rootkits".
  • Under Non-Malware Protection sub tab Change PUP and PUM entries to Treat detections as Malware
  • Click on the Scan...

Re: s768.exe detection

Hello,

Thanks for the feedback!

Can you share the remaining folders containing the .xpi?

Best regards,


fr33tux, 2016-11-15 19:00:21 (UTC)

Hello, i copy here the log file. You can see the folders address. AdwCleaner say "deleted", but after the system restart, still remain in system. Anyway, i write and repeat here for whom read this post: AdwCleaner makes it's job, isolate and quarantine...

Re: adwcleaner doesnt respond when clearing services

Hello,

Indeed, it's a known bug that we are working on.

To remove the remaining service, can you do the fllowing?

  • Download FRST
  • Right-click on the file -> "Execute as Administrator"
  • Please also check Shortcut.txt
  • Click on the "Scan" button
  • The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
  • Please host them on Up2Share and share the generated link.

Best ...

Re: s768.exe detection

Hello,

Thanks for the feedback!

Can you share the remaining folders containing the .xpi?

Best regards,

s768.exe detection

Hi folks, after install K-Lite Mega Pack I just did a scan and AdwCleaner found this s768.exe and relative folders. This executable file comes with the related .xpi file that is a doubt Firefox extention in this specific case boundled in the K-Lite installer (there was no windows choice about this during installation).

AdwCleaner makes is job as well putting the .exe in quarantine, btw some fo...

Re: AdwCleaner can't remove something

When AdwCleaner freezes (Not Responding) its usually caused by the service ucguard which it finds, but can't remove. Google FreeFixer, download and install it, then disconnect from the Internet, close your browser and run it. It will find the ucguard.sys file and tick the box to remove it (run Fix). Run AdwCleaner agian and you should find that ucguard has gone. If it has, you can reconnect th...

Re: AdwCleaner can't remove something

When AdwCleaner freezes (Not Responding) its usually caused by the service ucguard which it finds, but can't remove. Google FreeFixer, download and install it, then disconnect from the Internet, close your browser and run it. It will find the ucguard.sys file and tick the box to remove it (run Fix). Run AdwCleaner agian and you should find that ucguard has gone. If it has, you can reconnect the...

Re: Soucis avec adwcleaner

Greetings,

Here is what we're going to try:

  1. Download CCleaner from here, and install it.
  2. Start CCleaner (there should be a shortcut on your Desktop)
  3. Go in Options tab > Advanced, untick Only delete Windows temporary files older than 24 hours.
  4. Then in Options  tab > Surveillance, untick the both boxes.
  5. In the Clean tab, click on "Clean".
  6. When the cleaning is done, go in the "Registry" tab...