Search

Bonjour,

@Mario2245: Pour rappel, nous ne sommes que bénévoles qui aidons durant notre temps libre, en parallèle de nos autres activités. Et quelques fois, ça arrive effectivement de ne pas pouvoir répondre dans l'heure. Si vous pensez-être oublié, vous pouvez simplement relancer poliment, ou sinon attendre un peu le temps que l'on puisse vous répondre.

Merci Destrio5 :)

Hello,

@anhthe2812: Can you generate FRST logs for a final check ?

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host them on Up2Share and share the generated links.

Thanks,

Hello,

@Proton: I'm sending you an email with the coming release which includes the fix for this issue.

Thanks a lot regist for the help :)

Best regards,

Hello,  this seems to be F/P

# AdwCleaner v6.010 - Bericht erstellt am 06/09/2016 um 06:39:37 # Aktualisiert am 12/08/2016 von ToolsLib # Datenbank : 2016-09-05.1 [Server] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (X64) # Benutzername : Michael - MICHAEL-PC # Gestartet von : C:\Users\Michael\Desktop\adwcleaner_6.010.exe # Modus: Suchlauf # Unterstützung : https://toolslib.net/f...

Hello,

As cocochepeau said, sorry for the confusion.

@Albertsudarto:

Did you uncheck the following elements prior AdwCleaner cleaning ?

***** [ Services ] *****
 
[!] Service not deleted: UCGuard
[!] Service not deleted: backlh
[!] Service not deleted: Quoteex
[!] Service not deleted: Kuaizip Update Checker
[!] Service not deleted: KuaiZipDrive2
[!] Service not deleted: SoEasySvc
 
 
*****...

Thank you for taking the time to work with me on this. It is greatly appreciated.

In the debug log I see SimpleService.exe as a service being killed with no whitelist line under it but it appears that file isn't actually the file that keeps the remote session active anyways.

I manually killed the SimpleService.exe service and the remote session stays active with no problems.

Please see scree...

1) Please, do the log MBAM as it noticed  below:

Download Malwarebytes' Anti-Malware or from the mirror. Install it (during setup do not choose free test period), update bases setup proxy if needed). Click on Scan tab, choose Custom and click on Scan Option. Choose all disk drives in next window, choose Warn in drop-down menu and press Scan.Do not delete nothing by yourself!!! After scan compl...

Ok.

So, to remove UCGuard, can you try this:

• Download MalwareBytes Anti Malware here.
• Launch MalwareByte's Anti Malware from your desktop
• Click on the tab Settings -> Detection & Protection -> PUP/PUM and check "Treat these detections like malware".
• Tab Exam choose Threats, click on Scan now, and click on Launch the exam.
• If something is detected, choose to Quarantine everything. If it as...

Can you send me a zip of this shortcut to see what's wrong with it ? (right-click on it -> send to > compressed folder).

Best regards,

Every day, Windows Defender is detecting at least one Trojan on my PC.

MBAM is reporting that a copy of Windows' shortcut to the Messenger app in my Startup folder is a Trojan.Agent threat.  While it is possible that the recent attack has infected this shortcut, MBAM doesn't report any threat when I rename the shortcut or scan a copy of the same shortcut in a different location.

Is this a bug...