Search

Succesfully removed malware from my browser "kilogalikxyz" with adwcleaner

10/2016

# AdwCleaner v6.020 - Logfile created 01/10/2016 at 07:53:28 # Updated on 14/09/2016 by ToolsLib # Database : 2016-09-30.1 [Server] # Operating System : Windows 7 Professional Service Pack 1 (X64) # Username : paulm - DESIGN2015 # Running from : C:\Users\Paulm.TOOLS\Downloads\adwcleaner_6.020.exe # Mode: Scan # Support : https://toolslib.net/forum



***** [ Services ] *****

No malicious serv...

Thanks.

• Download RogueKiller here
• Execute the file "setup.exe" as Administrator (right-click on the file -> Execute as Administrator"
• The pre-scan will occur, please wait until it ends.
• Then click on [Scan] on the right hand corner. Wait until the scan finish.
• Finally, host the generated logfile on Up2Sha.re and copy/paste here the provided link.

I've run adwcleaner multiple times and I keep getting a threat detected in HKLM/Software/Description.  After adwcleaner cleans and reboots and I rerun it, it keeps showing up the detection.  I have manually looked in the registry and cannot find that folder.  Hidden files/folder is set to show everything.  I have run rkill, tsskiller and mbam which do not find this.

how can I remove this since...

Great ! Thanks for your patience, and sorry for the inconvenience,

Hi, I've just noticed that in options there is a counter for locally injected resources and I don't think it can be disabled.

This is from Pale Moon :

http://imgur.com/a/ODSwk

https://github.com/Synzvato/decentraleyes/issues/107

Oh! The problem has been now completely solved.

I appreciate your excellent work.

Thanks.

# AdwCleaner v6.020 - Logfile created 30/09/2016 at 15:03:49
# Updated on 14/09/2016 by ToolsLib
# Database : 2016-09-28.1 [Server]
# Operating System : Windows 7 Ultimate Service Pack 1 (X86)
# Running from : C:\Users\xxxxx\Desktop\Programs and Stuff\AdwCleaner\adwcleaner_6.020.exe
# Mode: Scan
# Support : https://toolslib.net/forum


***** [ Services ] *****

No malicious services found.

**...

Hello,

Sorry for the delay.

I do not reproduce this detections, is it possible to share the file "C:\Users\xxxxx\AppData\Roaming\8pecxstudios\Cyberfox\Profiles\xxxxxxxx.default\prefs.js" ? You can zip it and sent it by email if you prefer.

Thanks,

Hello,

@gamezertruth: Thanks for the help, but it's preferable if the person who first took the topic keeps it until resolution, except if she/he needs help.

@pedromatt:

We'll proceed differently:

• Download FRST
• Right-click on the file -> "Execute as Administrator"
• Click on the "Scan" button
• The logfile is saved as FRST.txt , and additional informations are in Addition.txt.
• Please host t...