Search

I used adwcleaner to clean these viruses but they just keep on returning after boot-up.

Here are the names:

-Registry- [-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.wiz

-Web browser- [-] [utorrent.en.softonic.com] [Search Provider] Deleted: utorrent.en.softonic.com [-] [dead-rising-3.en.softonic.com] [Search Provider] Deleted: dead-rising-3.en.softonic.co...

Bonjour fr33tux,

Voici le rapport d'ADWCLEANER comme convenu :

# AdwCleaner v6.010 - Rapport créé le 04/09/2016 à 19 : 15 : 28

 # Mis à jour le 12/08/2016 par ToolsLib

 # Base de données : 2016-09-03.2 [Serveur]

 # Système d'exploitation : Windows 10 pro (X64)

 # Nom d'utilisateur : Corentin - CORENTIN

 # Exécuté depuis : C:\Users\Corentin\Desktop\adwcleaner_6.010.exe

 # Mode: Scan

 #...

Hello,

As cocochepeau said, sorry for the confusion.

@Albertsudarto:

Did you uncheck the following elements prior AdwCleaner cleaning ?

***** [ Services ] *****
 
[!] Service not deleted: UCGuard
[!] Service not deleted: backlh
[!] Service not deleted: Quoteex
[!] Service not deleted: Kuaizip Update Checker
[!] Service not deleted: KuaiZipDrive2
[!] Service not deleted: SoEasySvc
 
 
*****...

Hello,

@Albertsudarto

Sorry for the confusion. anhthe2812 case should be resolved quickly. Otherwise, we'll just open a new thread for him.

fr33tux will review your file as soon as he can. :)

Regards.

Greetings,

If I understood correctly, you need some help removing some adwares ?

Can you share a scan logfile of AdwCleaner ? It will be a good start. :)

Thanks.

Hello,

Great ! So can you share me the file C:\AdwCleaner\AdwCleaner[Cxx].txt ?

We'll remove UCGuard then.

Thanks,

---

fr33tux, 2016-08-31 16:08:42 (UTC)

its here https://up2sha.re/file?f=diRbPZ8EDo67 sorry for late reply

It here: https://up2sha.re/file?f=AC13Sy5Qg47S

---

anhthe2812, 2016-08-31 16:13:42 (UTC)

^who is this guy ? sorry moderator but its not my file this guy just bumped in and...

Thank you for taking the time to work with me on this. It is greatly appreciated.

In the debug log I see SimpleService.exe as a service being killed with no whitelist line under it but it appears that file isn't actually the file that keeps the remote session active anyways.

I manually killed the SimpleService.exe service and the remote session stays active with no problems.

Please see scree...

Ahh yes, my mistake. Here are the two logfiles from a scan I just ran in Debug mode.

AdwCleaner_debug:

2016-09-03 18:38:49 :     <INFO>    [main] - Saving current options to the configuration file 2016-09-03 18:38:50 :     <INFO>    [main.gui] - Scan requested 2016-09-03 18:38:50 :     <INFO>    [scan] - Running from: C:\AdwCleaner 2016-09-03 18:38:50 :     <INFO>    [scan] - Progress: 0% 20...

Hello,

Also, if you still have the software killed, please share the debug log from AdwCleaner:

• Activate the options with Tools > Options > "Debug" in "Mode" section,
• Do a scan and a clean,
• Share the file C:\AdwCleaner\AdwCleaner_Debug.log.

Best regards,

Hello,

the change is effective with the definitions updates (automatically done at the beginning of a scan if you have an active network connection). You can copy/paste the logfile in your answer if you're unsure about which definitions you have).

For the donation, you can refer to this page: https://toolslib.net/donate/ If you have any question, just ask.

Best regards,