Search

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)

Have now run CCleaner to clean Registry and remove many, but not all, references to BrowserAir.

Windows: Settings: System: Default apps: Choose default applications by file type: .htm no longer shows BrowserAir.

Ah, minor problems remain.

Opera now works again as my default browser.  However, Opera could not see that it was the default browser until I used Windows: Control Panel: Default Programs to set it as the default.

Even then:

• Neither Windows: Settings: System: Default apps: Web browser nor Windows: Settings: System: Default apps: Choose default applications by protocol: HTTP shows any of the ...

Hello,

Perfect ! If you have any question, just ask.

Best regards,

Thanks for your prompt response!

MBAM report: https://up2sha.re/file?f=a8p2vGsmQ6Bp

AdwCleaner now reports no threats!

:)

Hello,

In complement, can you do the following ?

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If i...

I got infected with loads of adware after trying to install SUPER file converter.

I have run Windows Defender to remove trojans and a malware installer.

Whichever Prinicpal I give Full Control, there is always some other Principal's permission lacking to delete Program Files (x86)\MPC Cleaner.

Running AdwCleaner isn't managing to do so either.  Log file: https://up2sha.re/file?f=4pnRQn2e5du8...

Bonjour,

Désolé de remonter un vieux topic, mais l'infection est toujours d'actualité (ce qui montre que les dires des développeurs de ce logiciels sont bidons).

---

christophedlr, 2016-08-29 09:31:44 (UTC)

Pouvez-vous détailler ?

J'ai moi aussi le problème depuis le début de la matinée (6h du matin quand même), j'ai tenté ce qui est dit sur les 3 premières pages de ce topic sans succès. ...

Bonjour,

Désolé de remonter un vieux topic, mais l'infection est toujours d'actualité (ce qui montre que les dires des développeurs de ce logiciels sont bidons).

J'ai moi aussi le problème depuis le début de la matinée (6h du matin quand même), j'ai tenté ce qui est dit sur les 3 premières pages de ce topic sans succès. En désespoir de cause, j'ai utilisé ton astuce avec FRST Chapi, et pour l...