Search

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

Every day, Windows Defender is detecting at least one Trojan on my PC.

MBAM is reporting that a copy of Windows' shortcut to the Messenger app in my Startup folder is a Trojan.Agent threat.  While it is possible that the recent attack has infected this shortcut, MBAM doesn't report any threat when I rename the shortcut or scan a copy of the same shortcut in a different location.

Is this a bug...

bonjour,

juste pour vous signaler un faux positif dans la détection du registre 

Clé trouvée:  HKU\S-1-5-21-1809650161-3470081474-3047720606-1124\Software\Classes\DWGTrueViewToolCatalog Clé trouvée:  HKCU\Software\Classes\DWGTrueViewToolCatalog

DWG True View est une visionneuse de plan DWG très utilisé dans le monde du dessin :

http://www.autodesk.fr/products/dwg/viewers

merci :)

Hello,

Have you already done a "Clean", with UCGuard unselected in the Services tab ?

Of so, can you share me the file AdwCleaner[Cxx].txt ?

---

fr33tux, 2016-08-31 04:35:14 (UTC)

Sorry. but I can't find the files you mention

Hello,

Have you already done a "Clean", with UCGuard unselected in the Services tab ?

Of so, can you share me the file AdwCleaner[Cxx].txt ?

Hello,

Can you share me the logfile for the working cleaning you've made ?

Then we'll take care of UCGUard.

Please help me,

# AdwCleaner v6.000 - Logfile created 30/08/2016 at 19:08:51 # Updated on 12/08/2016 by ToolsLib # Database : 2016-08-23.1 [Local] # Operating System : Windows 8.1 Pro  (X64) # Username : PT.NB - ACER # Running from : D:\NBKC\Komputer\Software\adwcleaner_6.000.exe # Mode: Clean # Support : https://toolslib.net/forum

***** [ Services ] *****

[!] Service not deleted: 2cad402bf3...

Fortunately, I kept backups of CCleaner's registry deletions, some of which are clearly nothing to do with this adware:

• First run
• Second run

MBAM later found StartGo123, which had been hijacking Chrome.

I imagine the malware writers reading our conversation and learning too, but HTH.

It's not really clear, but IOBit is usually considered as PUP, so you can remove them, especially if you do not have installed the software yourself.

Hello,

Oh. It would have been interesting to get all the references to BrowserAir, so that I would have added them to AdwCleaner.

But thanks for the feedback :)