Search

Thanks.

• Download RogueKiller here
• Execute the file "setup.exe" as Administrator (right-click on the file -> Execute as Administrator"
• The pre-scan will occur, please wait until it ends.
• Then click on [Scan] on the right hand corner. Wait until the scan finish.
• Finally, host the generated logfile on Up2Sha.re and copy/paste here the provided link.

I've run adwcleaner multiple times and I keep getting a threat detected in HKLM/Software/Description.  After adwcleaner cleans and reboots and I rerun it, it keeps showing up the detection.  I have manually looked in the registry and cannot find that folder.  Hidden files/folder is set to show everything.  I have run rkill, tsskiller and mbam which do not find this.

how can I remove this since...

Oh! The problem has been now completely solved.

I appreciate your excellent work.

Thanks.

# AdwCleaner v6.020 - Logfile created 30/09/2016 at 15:03:49
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-28.1 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X86)
# Running from : C:\Users\xxxxx\Desktop\Programs and Stuff\AdwCleaner\adwcleaner_6.020.exe
# Mode: Scan
# Support : https://toolslib.net/forum


***** [ Services ] *****

No malicious services found.

**...

Ok.

Can you relaunch AdwCleaner and confirm that the problem is solved ?

Thanks,

Hello,

Please manually reset your Chrome profile like in this picture:

Then, click on "Reset", and everything should be ok.

Hello,

Sorry for the delay.

I do not reproduce this detections, is it possible to share the file "C:\Users\xxxxx\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\xxxxxxxx.default\prefs.js" ? You can zip it and sent it by email if you prefer.

Thanks,

Hello,

@gamezertruth: Thanks for the help, but it's preferable if the person who first took the topic keeps it until resolution, except if she/he needs help.

@pedromatt:

We'll proceed differently:

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host t...

the problem is that it actually found the ucguard.sys.. and then it asked me to restart the computer to remove it but it is still there

---

pedromatt, 2016-09-30 12:37:05 (UTC)

that bad news ! I just to ran Roguekiller and I will see what report ! did you ran a scan with your AV ?

which mode did you ran Roguekiller ? normal or safe mode ?

the problem is that it actually found the ucguard.sys.. and then it asked me to restart the computer to remove it but it is still there