I used adwcleaner to clean these viruses but they just keep on returning after boot-up.
Here are the names:
-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz
-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...
Hello,
As cocochepeau said, sorry for the confusion.
@Albertsudarto:
Did you uncheck the following elements prior AdwCleaner cleaning ?
***** [ Services ] *****
[!] Service not deleted: UCGuard
[!] Service not deleted: backlh
[!] Service not deleted: Quoteex
[!] Service not deleted: Kuaizip Update Checker
[!] Service not deleted: KuaiZipDrive2
[!] Service not deleted: SoEasySvc
*****...Ahh yes, my mistake. Here are the two logfiles from a scan I just ran in Debug mode.
AdwCleaner_debug:
2016-09-03 18:38:49 : <INFO> [main] - Saving current options to the configuration file 2016-09-03 18:38:50 : <INFO> [main.gui] - Scan requested 2016-09-03 18:38:50 : <INFO> [scan] - Running from: C:\AdwCleaner 2016-09-03 18:38:50 : <INFO> [scan] - Progress: 0% 20...Simple Help from https://simple-help.com/
File requested to whitelist is called SimpleService.exe
Screenshot
Good morning! So I re-ran AdwCleaner in Safe Mode, pressed Clean when it found 30 threats, and was once again prevented from a boot menu upon pressing F8 at startup. Argh!
There is not a file called C:\AdwCleaner\AdwCleaner_Debug.log.
AdwCleaner[C2] looks like this:
# AdwCleaner v6.010 - Logfile created 03/09/2016 at 09:13:48 # Updated on 12/08/2016 by ToolsLib # Database : 2016-09-03.1 [S...
Hey there,
I'm damn lucky because I had backed up my registry 2 days ago (I forgot until coming across another forum thread.) I just imported it into my registry and although the import did not fully complete (as some elements were currently in use), I WAS able to access the boot menu with F8 and choose Safe Mode after. Whew!
Next thing: AdwCleaner crashed on me at the end as I said, and it h...
Hello,
You can keep the quarantined elements from now, we'll see to delete them when the problems will be solved.
You can make the test to restore the registry elements from AdwCleaner. I doubt it will restore your access to the safe-mode, but we'll see and we'll proceed according to your results.
Best regards,
Hi, thanks for responding.
Well that should be good news!
Is the log file the same as the application file in Malwarebytes? It is not very detailed....
Here is the last file of the last scan I did (of several):
Malwarebytes Anti-Malware www.malwarebytes.org
Scan Date: 31/08/2016 Scan Time: 3:25:56 PM Logfile: mbam.txt Administrator: Yes
Version: 2.2.1.1043 Malware Database: v2016.08.31...
Hello,
The logfile seems to be complete, it means that the clean process has been successful, without crashing. Also, I do not see any deleted elements related to safe-mode.
Can you also share the Malwarebytes logfile ?
Best regards,
1) Please, do the log MBAM as it noticed below:
Download Malwarebytes' Anti-Malware or from the mirror. Install it (during setup do not choose free test period), update bases setup proxy if needed). Click on Scan tab, choose Custom and click on Scan Option. Choose all disk drives in next window, choose Warn in drop-down menu and press Scan.Do not delete nothing by yourself!!! After scan compl...